@dnd-kit/abstract

Repo toolingcaution

The project uses build tooling, but no security scanning tools were detected; this is a minor transparency gap rather than evidence of abandonment.

Security policycaution

No repository security policy was detected, leaving vulnerability-reporting guidance unclear.

Version stabilitycaution

Version 0.5.1 is not a stable-major release, and 90% of recent releases were prereleases; this creates some compatibility uncertainty despite the assessed release itself not being a prerelease.

Workflow auditcaution

All five workflows were analyzed and use read-only permissions, with no untrusted checkout or script-injection findings. However, 29 of 33 action references are unpinned and a high-confidence audit finding reports an ad hoc package install in the release workflow, creating a minor supply-chain hygiene concern.