@peculiar/asn1-android

Repo toolingcaution

The project uses TypeScript, Vitest, and npm scripts for its build and tests. No security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, reducing published guidance for reporting vulnerabilities and handling security maintenance.

Workflow auditcaution

Both workflows were analyzed successfully and had no untrusted checkouts or script-injection findings, but all nine action references are unpinned and the release workflow has high-confidence template-injection findings; these are workflow hygiene concerns rather than standalone adoption blockers.