moonwalkerz/contact-plugin

Security policycaution

No repository security policy was found. This is a transparency gap, although the project does have Sonar scanning as compensating security tooling.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, and it scopes permissions at job level. Both of its two action references are unpinned, which weakens build reproducibility.