sirix/mezzio-valinor-request-mapper

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected in the repository. This is a modest transparency and maintenance gap, not evidence of unsafe code.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no untrusted checkouts or injection findings. However, all 8 of 8 action references are unpinned, weakening build reproducibility and update integrity.