@peculiar/asn1-pfx

Repo package mentioncaution

The repository name does not match the package and its README does not mention this package, creating uncertainty about the linkage; the organization-owned monorepo structure partly explains the mismatch but does not remove it.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented.

Workflow auditcaution

All nine action references are unpinned, and the audit found three high-confidence template-injection findings in the release workflow. No untrusted checkout or script-injection path was found, so this is workflow hygiene risk rather than a severe dependency-health verdict.