samhk222/sinacor-parser

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool is reported. The missing scanner is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This lowers transparency but does not by itself indicate unsafe maintenance.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, which weakens build reproducibility and supply-chain hygiene.