torqit/data-importer-extensions-bundle

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

The repository has no published security policy, which reduces transparency for vulnerability reporting but is not an adoption blocker by itself.

Workflow auditcaution

The single workflow is fully audited, has no detected injection or untrusted-checkout issues, and pins its one action. Its top-level write permission is broader than necessary, but no untrusted trigger or sink makes this a mild hygiene concern.