upstatement/routes

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest security-process gap.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response.

Workflow auditcaution

All 3 workflows were fully audited with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 9 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.