@livekit/protocol

Repo toolingcaution

The project uses npm scripts, esbuild, and Babel, but no security-scanning tools were detected; this is a modest transparency and assurance gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented.

Workflow auditcaution

All four workflows were analyzed successfully, all 18 action references are pinned, and no concrete findings or untrusted sinks were detected. Three workflows use top-level write permissions, which is mild hygiene risk but not severe without an untrusted path.