@bufbuild/protoc-gen-es

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance less transparent; the gap is partly offset by active maintenance and Dependabot scanning.

Workflow auditcaution

All 38 analyzed action references are unpinned, two workflows grant top-level write permissions, and three reusable workflows inherit secrets; the audit also found high-confidence secrets-inherit findings, while cache-poisoning findings were low confidence and no untrusted checkout or script injection was observed.