packaged-ui/pagelets

Security policycaution

No security policy is present in the repository. This is a transparency gap, although the active organization-backed project and automated scanning partly compensate.

Workflow auditcaution

All six analyzed action references are unpinned, weakening build reproducibility, and the audit reports high-confidence use of long-lived registry credentials. Job-level permissions and no untrusted checkout or injection findings reduce the exposure but do not remove the concern.