embla-carousel-autoplay

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package, creating some uncertainty about package-to-repository ownership; the package’s monorepo-style file layout partly compensates.

Repo toolingcaution

The project uses established build tooling including Rollup, TypeScript, Babel, and npm scripts. No security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

No repository security policy was detected, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

All four analyzed action references are unpinned, and the release workflow has a high-confidence template-injection finding; there are no untrusted checkouts or dangerous triggers, so this is a build-hygiene concern rather than a severe standalone risk.