mwstake/mediawiki-component-inputprocessor

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although it does not by itself indicate abandonment or make the release unfit.

Workflow auditcaution

The single workflow was fully analyzed and has no untrusted checkout or script-injection trigger, but all six action references are unpinned. High-confidence template-injection findings are hygiene concerns here because no dangerous trigger was observed.