@vueuse/shared

Repo toolingcaution

The repository uses TypeScript, Vitest, Vite, webpack, Turbo, and npm build tooling, supporting a structured and testable project. No security scanning tools were detected, leaving a modest process gap.

Security policycaution

The repository has no published security policy. This is a transparency and vulnerability-reporting gap, though active maintenance and other repository controls partly reduce its practical impact.

Token permissionscaution

All workflows declare permissions, but the CI and publish workflows have top-level write access. Explicit permissions are better than missing declarations, yet broad write capability increases automation exposure.