phpbb/mediaembed

Repo toolingcaution

The project uses Composer and Phing for build tooling, but no security scanning tools were detected. The build process is structured, while the missing scanning is a modest transparency gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a maintenance-transparency gap, though active development and organization backing provide some compensation.

Token permissionscaution

Two of three workflows request top-level write permissions, and one workflow has no top-level permissions declaration. The workflows show no dangerous patterns, but broader-than-necessary token access increases repository automation risk.