eslint-plugin-vue

Repo toolingcaution

The project uses established build and test tooling, including TypeScript and Vitest, but the collected data shows no security-scanning tools.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations less transparent.

Workflow auditcaution

All three workflows were analyzed, all 29 action references are pinned, and there are no untrusted checkouts or script-injection findings. One workflow has top-level write permissions and CI has four high-confidence low-severity adhoc-package findings, which are limited hygiene concerns.