jotai

Repo toolingcaution

The project uses TypeScript, Vitest, and npm build tooling, but no security-scanning tool was detected.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations less transparent.

Workflow auditcaution

All eight workflows were analyzed, use read-only permissions, and pin all 26 action references; however, two high-confidence adhoc-package findings and a trusted-publishing finding indicate workflow hygiene concerns.