@peculiar/asn1-rsa

Repo package mentioncaution

The repository name does not match the package and its README does not mention @peculiar/asn1-rsa, so the package-to-source relationship is less transparent; its monorepo file tree provides some context but does not remove this gap.

Repo toolingcaution

The project uses TypeScript, Vitest, and npm scripts for its build and tests; no security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

Both workflows were analyzed and had no untrusted checkouts or script-injection findings, but all 9 action references are unpinned. The high-confidence template-injection findings in the release workflow are a publishing-workflow hygiene concern.