@commitlint/is-ignored

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, so the package-to-repository relationship is less transparent despite the apparent monorepo context.

Repo toolingcaution

The project uses TypeScript, Vitest, and build tooling, but no security-scanning tools were detected, leaving a modest transparency gap.

Security policycaution

No repository security policy was detected. This is a documentation gap, though the active organization-backed project provides some compensating maintenance evidence.

Workflow auditcaution

All five workflows were analyzed with no untrusted checkout or script-injection findings, but 20 of 25 action references are unpinned and CI installs a package outside a lockfile; these are workflow hygiene concerns.