@vue/compiler-dom

Repo package mentioncaution

The repository name does not match the package name and its README does not mention @vue/compiler-dom; this is explainable for a Vue monorepo subpackage but still leaves package-to-repository linkage less explicit.

Repo toolingcaution

The repository uses established build, test, and packaging tools, including TypeScript, Rollup, Vitest, Vite, and npm scripts; no security scanning tools were detected, leaving a minor process gap.

Token permissionscaution

Four workflows request top-level write permissions and the release workflow lacks top-level permissions, which is a workflow-hardening gap despite the absence of detected dangerous workflow patterns.