@solana/wallet-standard-features

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, creating a genuine concern that the repository relationship is not transparent and should be verified.

Repo toolingcaution

The repository uses TypeScript, webpack, and npm build tooling, but no security scanning tools were detected; the build setup is healthy while security-tooling coverage is limited.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance unclear.

Token permissionscaution

One workflow lacks top-level token permissions and the release workflow grants top-level write permissions; these settings are not necessarily unsafe, but they provide weaker least-privilege transparency than explicit read-only or narrowly scoped permissions.