@datadog/browser-rum-core

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations less clear for users and contributors.

Workflow auditcaution

All six workflows were analyzed and all 15 action references are pinned. A high-severity cache-poisoning finding has low confidence and an archived action was found with high confidence; top-level write permissions exist in three workflows, but no untrusted checkout or script-injection sink was detected, keeping this a limited hygiene concern.