@floating-ui/core

Repo toolingcaution

The repository uses established build tooling, but no security-scanning tools were detected; this is a minor transparency gap rather than a severe concern.

Workflow auditcaution

All four workflows were analyzed with no audit findings, unsafe untrusted checkouts, or script injections. However, all 12 action references are unpinned and one workflow has top-level write permissions, creating a modest reproducibility and token-scope concern.