utopia-php/cache

Dangerous workflowscaution

The repository has one pull_request_target workflow, which can run with elevated trust in response to pull requests; no untrusted checkout or script injection was detected, so this is a contained workflow risk.

Repo issue activitycaution

There are only three open issues and three open pull requests, but none were opened or closed in the last month; this is a modest transparency and responsiveness concern despite active commits.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving less evidence of automated security hygiene.

Security policycaution

No security policy was found, so the project gives no documented reporting path or security-response expectations; organizational backing and active maintenance partly compensate but do not remove the gap.

Token permissionscaution

The pull-request workflow has top-level write token permissions, increasing the potential impact of a workflow compromise even though no direct unsafe checkout or injection was observed.