parisek/acf-json-schema

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented; the available composer-audit tooling partly offsets this but does not replace a policy.

Workflow auditcaution

All 3 workflows were analyzed successfully with no untrusted checkouts, script injection, or auditor findings, but all 8 action references are unpinned and 2 workflows grant top-level write permissions. The complete audit and absence of dangerous sinks keep this as workflow hygiene rather than a severe risk.