@ant-design/cssinjs

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less verifiable than it could be.

Repo commit activitycaution

The repository shows zero commits and zero active maintainers in the last three months, a meaningful maintenance warning even though the registry records recent releases.

Repo issue activitycaution

There were no new or closed issues or merged pull requests in the last month, suggesting limited visible development activity, though open issues and pull requests remain.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

Both workflows were analyzed completely with no untrusted checkout or script injection, but all three action references are unpinned and a high-confidence medium-severity secrets-inherit finding exposes broader-than-needed credentials.