@tsconfig/node18

Repo commit activitycaution

Only two commits were recorded in the last three months, which is light activity, but both active maintainers contributed and the package has recent registry releases.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and handling less transparent than ideal for a maintained dependency.

Workflow auditcaution

Both workflows were analyzed without high-confidence findings or untrusted checkout and injection paths, but all five action references are unpinned and one workflow grants top-level write access. This is a maintenance and update-integrity caution, not a severe risk on its own.