@vue/compiler-dom

Repo toolingcaution

The project uses established build and test tools and an actual build system; no automated security scanning tools were detected, which is a minor transparency gap but not decisive given the other evidence.

Workflow auditcaution

All 8 workflows were analyzed and all 40 action references are pinned. However, a high-confidence template-injection finding and a high-confidence ad hoc package install affect the release workflow's hygiene; the low-confidence cache findings carry little weight, and no untrusted checkout or script-injection sink was found.