@peculiar/asn1-pkcs9

Dependency profilecaution

Eight runtime dependencies create a meaningful dependency surface for this small schema package, though the dependencies are largely related packages within the same project ecosystem.

Repo toolingcaution

TypeScript, Vitest, and npm build tooling are present; the absence of security-scanning tools is a modest hygiene gap rather than evidence of abandonment.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

Both workflows were analyzed, but all 9 action references are unpinned and the release workflow has three high-confidence template-injection findings. No untrusted checkout or dangerous trigger was reported, so this is a workflow-hygiene caution rather than a severe standalone risk.