chrono-node

Lifecycle scriptscaution

A prepare script runs during installation, adding build-time behavior beyond simple file installation; this is a modest operational concern rather than a severe health issue.

Repo toolingcaution

The project uses TypeScript, Webpack, and npm scripts for builds, but no security-scanning tool was detected; the missing scanner is a modest transparency gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear; active commits and releases partly compensate but do not remove the documentation gap.

Workflow auditcaution

Both workflows were fully analyzed with no injection or high-severity findings, and no workflow has broad top-level write permissions. However, all 3 referenced actions are unpinned, which weakens CI reproducibility.