wpmetabox/mb-relationships

Repo toolingcaution

Composer is used as a build tool, providing project build structure, although no security scanning tools were detected.

Security policycaution

The repository has no security policy, leaving disclosure and response expectations undocumented.

Workflow auditcaution

Both analyzed workflows use unpinned actions, which weakens build reproducibility. The audit found no injection, untrusted checkout, excessive top-level permissions, or other actionable workflow findings.