@reown/appkit-ui

Dangerous workflowscaution

One pull_request_target workflow exists, but no analyzed workflow used an untrusted checkout or detected script injection. This is a limited workflow concern rather than a severe health problem.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention @reown/appkit-ui, creating some uncertainty about the exact package-to-repository linkage. The organization monorepo context partly explains the name mismatch but does not remove the missing package mention.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations less transparent.

Token permissionscaution

Seven workflows lack top-level permissions and four declare top-level write access, so workflow privilege hygiene is weaker than ideal, despite several workflows using read-only or job-level permissions.