@peculiar/asn1-cms

Repo toolingcaution

The repository uses TypeScript, Vitest, and npm scripts, but no security-scanning tool was detected; this is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations and response procedures undocumented.

Workflow auditcaution

All 9 analyzed action references are unpinned, which weakens build reproducibility. The audit also found three high-confidence template-injection findings, but template injection alone is workflow hygiene under the available evidence; there were no untrusted checkouts or script-injection findings.