nativephp/mobile-starter

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency gap rather than a severe adoption risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unspecified. Active maintenance partly offsets this transparency gap but does not remove it.

Workflow auditcaution

All three workflows use read-only permissions and the audit completed cleanly, but all nine action references are unpinned. Unpinned actions weaken build reproducibility and supply-chain hygiene.