@formatjs/ts-transformer

Repo toolingcaution

The project uses established build tooling, but no security-scanning tools were detected. This is a modest transparency and hygiene gap rather than an abandonment signal.

Security policycaution

No security policy was found in the linked repository, leaving vulnerability-reporting expectations less clear for users and maintainers.

Workflow auditcaution

All 79 analyzed action references are unpinned, which weakens build reproducibility. The audit also found high-confidence template-injection patterns and medium-confidence bot-condition findings, but no untrusted checkout or script-injection trigger was reported, so these remain workflow hygiene concerns rather than standalone severe risk.