tales-from-a-dev/twig-tailwind-extra

Repo toolingcaution

The project uses Composer build tooling, which fits the package ecosystem, but no security scanning tools were detected. The missing scanning is a minor hygiene gap given the otherwise active project.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear. This is a transparency gap, but not evidence of unsafe code by itself.

Workflow auditcaution

The only workflow was fully analyzed with no injection or high-confidence audit findings, but all 3 referenced actions are unpinned. That weakens build reproducibility and supply-chain hygiene.