chrono-node

Lifecycle scriptscaution

The package has a prepare install lifecycle script, adding installation-time execution beyond a data-only package; this is a modest operational concern.

Repo toolingcaution

The repository uses TypeScript, webpack, and npm scripts for builds, but no security scanning tools were detected, leaving a modest transparency gap.

Security policycaution

No security policy was found in the repository, reducing clarity about vulnerability reporting and response.

Workflow auditcaution

Both workflows were analyzed completely with no injection, untrusted checkout, or token-permission findings. However, all three analyzed action references are unpinned, which weakens build reproducibility.