@emnapi/runtime

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, creating uncertainty about whether this is the package's dedicated source repository.

Repo toolingcaution

The project uses TypeScript, npm scripts, and Rollup, but no security scanning tools were detected; this is a modest repository hygiene gap rather than evidence of abandonment.

Security policycaution

No security policy was found, reducing transparency about vulnerability reporting and response procedures.

Token permissionscaution

All three analyzed workflows declare top-level write permissions, which is broader than necessary and increases CI credential exposure.