setasign/setapdf-signer-addon-google-cloud-kms

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That limits evidence of proactive security-process maturity without making the release unsafe by itself.

Security policycaution

The repository has no security policy, so there is no documented vulnerability-reporting path. This is a transparency and response-process gap, but it is moderated by the recent maintenance evidence.