webmozart/assert

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a transparency and process gap, though it is not severe given the other maintenance evidence.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a genuine but limited transparency gap.

Token permissionscaution

The sole workflow has no top-level token permissions declaration. No write-enabled workflow was observed, but explicit least-privilege configuration would provide stronger CI transparency.