@peculiar/asn1-x509-attr

Repo toolingcaution

The project uses TypeScript, Vitest, and npm scripts, and the repository has tests. No security-scanning tools were detected, leaving a modest security-process gap.

Security policycaution

No security policy was found in the repository. This weakens vulnerability-reporting transparency, though active commits and releases provide compensating maintenance evidence.

Workflow auditcaution

Both workflows were analyzed without failures and have no untrusted checkouts or script-injection findings, but all 9 action references are unpinned and the release workflow has three high-confidence template-injection findings. These are meaningful release-hygiene concerns even without a dangerous trigger.