roadrunner-php/roadrunner-api-dto

Repo toolingcaution

Composer is used as a build tool, but no security-scanning tools were detected. This is a modest transparency and preventive-maintenance gap, not evidence that the release is unsafe.

Security policycaution

No security policy was found in the repository, leaving vulnerability-reporting expectations less transparent.

Token permissionscaution

Both analyzed workflows request top-level write permissions. This increases the impact of a workflow compromise and is a genuine supply-chain hygiene concern, despite the absence of detected dangerous workflow patterns.