xima/xima-typo3-recordlist

Repo toolingcaution

Composer is used for the build, but no security-scanning tool was detected; this is a modest transparency and maintenance gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving disclosure and response expectations undocumented for a package used in TYPO3 backend modules.

Workflow auditcaution

All 11 analyzed action references are unpinned, which weakens build reproducibility. The one pull_request_target workflow has no untrusted checkout or script-injection sink, and the audit completed for all three workflows with no findings.