sirix/redaction

Project backingcaution

The package is maintained under a user-owned repository rather than an organization, so the backing is comparatively narrow, though the release activity provides compensating evidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no published security policy, which makes vulnerability reporting less transparent for a library handling redaction concerns.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no dangerous triggers or audit findings; however, both of its two action references are unpinned, weakening build reproducibility.