winter/wn-location-plugin

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are configured; this is a moderate transparency and hygiene gap without evidence of abandonment.

Token permissionscaution

The one workflow has no top-level permissions declaration, so its token scope is less explicit than preferred; however, no workflow requests explicit write permissions.