@huggingface/tokenizers

Security policycaution

No security policy was found in the repository, leaving vulnerability-reporting expectations less transparent. This is a genuine hygiene gap but not a severe health risk on its own.

Token permissionscaution

One workflow lacks top-level permissions and the publishing workflow grants top-level write permissions, so least-privilege configuration is not fully demonstrated. The absence of dangerous workflow patterns partly limits the concern, but the permissions gap remains.

Version stabilitycaution

Version 0.2.0 is not a stable major release, so API stability may be less predictable; however, it is not marked prerelease and recent releases show consistent activity.