tourze/user-service-contracts

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest process gap for ongoing dependency and build assurance.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, which weakens build reproducibility and supply-chain hygiene.