rector/swiss-knife

Repo toolingcaution

The project uses Composer build tooling but reports no security-scanning tools. That weakens automated security hygiene, though other maintenance signals remain strong.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency and maintenance gap, but not evidence that the release is unfit to use.

Workflow auditcaution

All three workflows were analyzed with no audit findings, no untrusted checkouts, and no script injection; however, all seven action references are unpinned. Unpinned actions weaken build reproducibility and introduce avoidable workflow supply-chain risk.