open-dxp/admin-bundle

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and assurance gap.

Workflow auditcaution

All five workflows were analyzed with no reported audit findings or untrusted checkout/script-injection sinks. However, all nine action references are unpinned and one workflow grants top-level write access, creating a moderate CI hygiene concern.