@algolia/autocomplete-shared

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package, so the package-to-repository relationship is less transparent; the organization-owned monorepo context partly offsets this.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance and disclosure expectations unclear.

Workflow auditcaution

All four workflows were analyzed, but all 27 action references are unpinned, two workflows grant top-level write permissions, and two high-confidence github-app findings report blanket app-token permissions. The audit also found a lower-severity ad hoc package install.