@eslint/plugin-kit

Repo toolingcaution

The repository uses TypeScript and Vite build tooling, but no security-scanning tools were detected. The absence is a modest transparency and process gap, partially offset by the repository's security policy and controlled workflows.

Token permissionscaution

All workflows declare top-level permissions, and four are read-only; three publishing or automation workflows have top-level write permissions, which is justified operationally but increases the impact of workflow compromise.

Version stabilitycaution

Version 0.7.3 is not a stable-major release, so API compatibility may still evolve; it is nevertheless a normal release rather than a prerelease, with no recent prerelease usage.