mwstake/mediawiki-component-commonwebapis

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest security-process gap.

Security policycaution

The repository has no published security policy, reducing transparency about vulnerability reporting and response.

Workflow auditcaution

The sole workflow was fully analyzed and has no untrusted checkout or script-injection trigger, but all 5 action references are unpinned and two high-confidence template-injection findings indicate workflow hygiene that should be corrected.