testo/data

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.

Version stabilitycaution

Version 0.1.10 is not a stable major release, so its API may still change, but it is a regular release rather than a prerelease.

Workflow auditcaution

The single workflow has an unpinned action and top-level write permissions. However, the audit found no untrusted checkout, script injection, or other high-confidence dangerous finding, so this is workflow hygiene rather than a severe risk.