axe-core

Maintainerscaution

The package has clear organization-backed publishing through deque.com, but wilcofiers (gmail.com) and dylanb (barrell.com) are outside-domain publisher accounts, creating minor account-hygiene risk.

Workflow auditcaution

All 11 workflows were analyzed with no untrusted checkout or script-injection findings. Eleven of 65 action references are unpinned, and high-confidence low-severity adhoc package findings affect nightly tests; the low-confidence cache findings are hygiene concerns rather than decisive risks.