conventional-commits-parser

Repo toolingcaution

The project uses TypeScript, Vite, and npm scripts, but no security-scanning tools were detected; this is a modest transparency and hygiene gap.

Security policycaution

No repository security policy was detected, leaving vulnerability-reporting expectations undocumented; this is a minor transparency gap rather than evidence of abandonment.

Workflow auditcaution

All 5 workflows were analyzed with no audit findings or untrusted checkout and script-injection paths, but all 37 action references are unpinned and one workflow grants top-level write permissions, creating workflow reproducibility and least-privilege concerns.