seatplus/esi-schema

Repo popularitycaution

The repository has no recorded stars, forks, or watchers. This limits popularity-based validation, but popularity is only supporting evidence and the active maintenance signals compensate for it.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and assurance gap rather than evidence of unsafe behavior.

Security policycaution

The repository has no SECURITY.md policy, leaving vulnerability-reporting expectations unclear for a package intended for application integration.

Token permissionscaution

One workflow lacks top-level permissions and another requests top-level write access, so workflow privilege boundaries are not uniformly minimized; the separate workflow analysis found no dangerous checkout or injection patterns.