@shikijs/types

Repo package mentioncaution

The repository name does not match the package and its README does not mention @shikijs/types, so the package-to-repository link is less explicit; the organization and monorepo context partly compensate.

Repo toolingcaution

The repository uses established build and test tooling, including TypeScript and Vitest, though no security-scanning tool was detected.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations less transparent despite the package's otherwise active maintenance.

Workflow auditcaution

All 13 analyzed action references are unpinned, and the audit found high-confidence adhoc package installations; the reported high-severity cache finding is low confidence, so this is workflow hygiene caution rather than a severe dependency risk.