o3-shop/wave-theme

Repo toolingcaution

Composer is used for build tooling, but no security-scanning tool was detected. That is a modest transparency gap, not evidence of abandonment or unsafe code.

Security policycaution

The repository has no security policy, leaving reporting and disclosure expectations undocumented. Active commits and organization backing partly reduce the maintenance concern but do not replace a policy.

Workflow auditcaution

The sole workflow was fully analyzed, uses read-only permissions, and has no untrusted checkout or injection findings. However, all 4 of 4 action references are unpinned, which creates avoidable build-integrity and maintenance risk.