@eventcatalog/core

Dependency profilecaution

The 91 runtime dependencies create substantial upgrade and transitive-maintenance complexity for adopters, though the active project evidence partly offsets the concern.

Repo toolingcaution

The project uses build tooling, but no security scanning tools were detected; the missing scanning layer is a modest transparency and maintenance concern.

Workflow auditcaution

All five workflows were analyzed with no untrusted checkout or script-injection findings, but all 24 action references are unpinned and a high-severity cache finding was reported with low confidence; a high-confidence adhoc package install is also present.