@algolia/autocomplete-preset-algolia

Lifecycle scriptscaution

A prepare lifecycle script is present, adding install-time behavior that deserves awareness, though the release also has build provenance and a conventional compiled package layout.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response guidance less transparent than it could be.

Workflow auditcaution

All four workflows were analyzed, but all 27 action references are unpinned, two workflows grant top-level write access, and two high-confidence findings report blanket GitHub App permissions; no untrusted checkout or injection path was found.