@vue/devtools-kit

Repo issue activitycaution

There were 188 open issues and no issues or pull requests closed in the last month, despite 11 new pull requests; this suggests some backlog and slightly reduces maintenance confidence.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package, creating a provenance and ownership clarity concern even though the repository is organization-owned.

Repo toolingcaution

The repository uses established build and test tools, but no security-scanning tools were detected, leaving a modest repository-hygiene gap.

Security policycaution

The linked repository has no security policy, reducing transparency about vulnerability reporting and response procedures.

Workflow auditcaution

All four workflows were analyzed with no high- or medium-severity findings and no untrusted checkout or script-injection paths. However, six of seven action references are unpinned, and high-confidence adhoc-package findings plus one top-level write-permission workflow warrant build-hygiene caution.