swipegames/public-api

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected. For a generated API package this is a transparency and maintenance gap, though it does not outweigh the recent activity.

Security policycaution

No security policy was found in the linked repository. This leaves vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The audit analyzed all four workflows and found no untrusted checkouts or script-injection findings, but 18 of 20 action references are unpinned and one workflow grants top-level write access. High-confidence template-injection and archived-action findings add workflow hygiene concerns, while the low-confidence cache findings carry little weight.