@vueuse/integrations

Repo package mentioncaution

The package is published from a monorepo whose name does not match this subpackage, which is ordinary for monorepo packages; however, the repository README does not mention the package explicitly, creating a small traceability gap.

Repo toolingcaution

The repository uses established build and test tools, but no security-scanning tools were detected; this is a modest transparency and assurance gap.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance less explicit than ideal.

Token permissionscaution

Two workflows declare top-level write permissions, increasing CI token scope; no other workflow permission gaps were observed.