hono

Repo toolingcaution

The repository uses established TypeScript, Vite, Vitest, npm, esbuild, and rolldown tooling. It reports no security-scanning tools, leaving a modest transparency gap.

Security policycaution

The repository has no published security policy, which makes vulnerability-reporting expectations less transparent despite the otherwise active project.

Workflow auditcaution

All six workflows were analyzed, all 77 action references are pinned, and five workflows use read-only permissions. The release workflow has two high-confidence low-severity adhoc-package findings, while the cache findings are low confidence and therefore hygiene only.