openeuropa/oe_theme

Repo toolingcaution

The project uses Make and Composer for builds, but no security-scanning tools were detected, leaving less automated coverage for dependency or code security checks.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations less transparent. This is a documentation gap, not evidence of abandonment.

Version stabilitycaution

The release is not marked prerelease, but is_stable_major is false and the version format is nonstandard, which makes compatibility expectations less clear despite the active release history.

Workflow auditcaution

Both workflows use unpinned actions, and the release workflow has six high-confidence template-injection findings. No untrusted checkout or script-injection sink was reported, so these remain workflow hygiene concerns rather than a severe standalone risk.