utopia-php/span

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, so users lack documented guidance for reporting vulnerabilities and understanding the project's security process.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or untrusted checkout/script-injection sinks, but it uses top-level write permissions and its one action is unpinned. These are workflow hygiene concerns, not a severe risk on their own.