editorconfig

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a real maintenance warning, although recent release activity and a push earlier in the year provide some compensating evidence.

Repo toolingcaution

The project uses CMake, TypeScript, and npm build tooling, but no security scanning tools were detected, leaving a modest transparency and security-hygiene gap.

Token permissionscaution

Both workflows lack top-level token permissions, and one relies on job-level permissions only. This is less explicit than least-privilege declarations at workflow scope and creates a minor supply-chain hygiene concern.