youwe/testing-suite

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tools were detected; this is a modest transparency gap, partly offset by the package's built-in analysis tooling.

Security policycaution

No repository security policy was found. This does not show a security defect, but it leaves vulnerability-reporting expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, injection findings, or write-wide permissions, but its one action reference is unpinned; that is a minor reproducibility and supply-chain hygiene gap.