@modern-js/utils

Repo package mentioncaution

The repository name does not match the package name and its README does not mention @modern-js/utils, creating a caution that the package-to-repository relationship is not explicit. The broader monorepo structure and matching @modern-js project context partly reduce that concern.

Repo toolingcaution

The project uses Nx, npm scripts, and Babel, showing an established build setup, but no security-scanning tools were detected, leaving a modest transparency gap.

Security policycaution

No repository security policy was found, which weakens vulnerability-reporting transparency, although the active organization-backed project provides some compensating maintenance context.

Workflow auditcaution

All 10 workflows were analyzed, all 27 action references are pinned, and no dangerous trigger or untrusted checkout findings were found. Six high-confidence low-severity findings install packages outside a lockfile, a minor reproducibility and workflow-hygiene concern.