emojilib

Build provenancecaution

No build provenance attestation or trusted-publisher setup was detected, so consumers receive less verification of how this release was produced.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating a meaningful recent maintenance gap despite the recent release and push.

Repo toolingcaution

No build tooling or security scanning tools were detected, leaving limited automated protection for a package that is published from a repository.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The complete audit found no dangerous triggers, sinks, or audit findings, but both workflow action references are unpinned, leaving them exposed to upstream action changes.