@testing-library/user-event

Repo toolingcaution

The project uses TypeScript, npm scripts, and esbuild, showing an established build process. No repository security scanning tools were detected, which is a modest transparency gap.

Security policycaution

The repository has no security policy. This is a maintenance and disclosure-process gap, though it is partly offset by the active organization-backed project and recent development.

Workflow auditcaution

Both workflows were analyzed with no untrusted checkout or script-injection findings, but all 10 action references are unpinned and a high-confidence unsound-contains finding affects CI conditions. These are workflow hygiene concerns, not evidence that the release itself is unfit.