@discordjs/rest

Repo toolingcaution

The project uses established TypeScript, Vitest, tsup, Turbo, and npm tooling. The absence of detected security-scanning tools is a modest transparency gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

All 46 action references are unpinned, and the audit found high-confidence template-injection findings plus a broad app-token finding; the pull_request_target trigger has no untrusted checkout or script-injection sink, limiting the severity.