@rc-component/color-picker

Lifecycle scriptscaution

A prepare install-time script is present, adding some install behavior that consumers should account for, but this signal alone does not indicate severe risk.

Security policycaution

No repository security policy was found, leaving vulnerability reporting guidance incomplete despite the presence of security scanning tools.

Workflow auditcaution

All 4 workflows were analyzed with no audit findings or untrusted checkout and script-injection issues. However, 3 workflows use top-level write permissions and 4 of 6 action references are unpinned, creating moderate workflow hygiene concerns.