utopia-php/mongo

Security policycaution

No repository security policy was found, which reduces vulnerability-reporting transparency; active development and CodeQL scanning partially compensate but do not eliminate this hygiene gap.

Token permissionscaution

All three workflows lack top-level token permissions declarations. No workflow requests top-level write access, but explicit least-privilege declarations would provide stronger CI security hygiene.