@solana-program/token

Repo toolingcaution

The project uses a build tool, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not evidence of unfitness.

Version stabilitycaution

Version 0.17.0 is not a stable-major release, but it is not prerelease and recent releases contain no prerelease versions, so the maturity concern is limited.

Workflow auditcaution

All four workflows were analyzed with no untrusted checkouts or script injection, and two use job-level permissions. However, all eight action references are unpinned and two publish workflows inherit secrets, creating moderate workflow hygiene concerns.