@dnd-kit/geometry

Repo toolingcaution

The project uses build tooling, but no security scanning tools were detected; the active repository and provenance partly compensate, though security automation is not evident.

Security policycaution

No repository security policy was detected, leaving vulnerability-reporting guidance less transparent.

Version stabilitycaution

This release is not a prerelease, but 90% of recent releases are prereleases and the package remains below version 1.0, so its API maturity is somewhat less certain.

Workflow auditcaution

All five workflows were analyzed and use read-only permissions, with no untrusted checkout or script-injection findings. However, 29 of 33 action references are unpinned, and the release workflow installs a package outside a lockfile, creating reproducibility and supply-chain hygiene concerns.