rebilly/client-php

Security policycaution

The repository has no security policy, which leaves vulnerability-reporting expectations less transparent. Psalm scanning partly supports engineering hygiene but does not replace a reporting policy.

Workflow auditcaution

All four workflows were analyzed with no untrusted checkouts, script injection, or high-confidence audit findings, and three scope permissions at job level. However, 26 of 28 action references are unpinned, creating a workflow reproducibility and action-update risk.