@vue/devtools-api

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package, creating some uncertainty about the package-to-repository relationship despite the broader organization backing.

Security policycaution

The repository has no security policy, leaving disclosure and response guidance less transparent for users of the package.

Workflow auditcaution

All 6 of 7 action references are unpinned, and high-confidence low-severity adhoc-package findings show workflows installing packages outside a lockfile; one workflow also has top-level write permissions. No untrusted checkout or script-injection paths were found.