api-platform/json-api

Repo toolingcaution

Composer is used for builds, providing expected ecosystem tooling. No security scanning tool was detected, leaving a modest process gap but not a dependency-health failure on its own.

Workflow auditcaution

The one workflow uses a pull_request_target trigger without untrusted checkout or script-injection findings, but its only action is unpinned. The audit completed fully and found no higher-confidence workflow risks.