@appium/support

Repo toolingcaution

The project uses TypeScript, Gulp, Nx, and npm scripts for its build, indicating established development tooling. No security-scanning tools were detected, a modest transparency gap partly offset by the repository's security policy and workflow audit.

Workflow auditcaution

All 16 workflows were analyzed without untrusted checkouts or script-injection findings tied to the pull_request_target triggers, but all 33 action references are unpinned. High-confidence template-injection findings affect release and version workflows; the low-confidence cache finding and low-severity ad hoc package findings are secondary hygiene concerns.