@ungap/structured-clone

Repo toolingcaution

The project uses Rollup and npm scripts for builds, but no security scanning tools are reported, leaving a modest verification gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Type declarationscaution

No type declarations are included, which is a real integration gap for TypeScript consumers of this JavaScript library.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous audit findings or untrusted-code sinks. However, all three action references are unpinned, which weakens build reproducibility, while the missing top-level permissions block is not a concern by itself.