monperrus/crawler-user-agents

Repo toolingcaution

Composer build tooling is present, supporting reproducible project handling, but no security scanning tools were detected. The missing scanning is a minor transparency gap.

Security policycaution

The repository has no security policy. This limits guidance for reporting vulnerabilities, though the active maintenance and clear package structure reduce the practical impact.

Workflow auditcaution

All 11 workflow action references are unpinned, which weakens build reproducibility. The auditor also reported low-confidence github-env and cache-poisoning patterns; with no untrusted checkout or script-injection counts, these remain hygiene concerns rather than severe risks.