meriyah

Repo toolingcaution

The project uses established build and test tooling, but no security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

No repository security policy was found, reducing clarity about vulnerability reporting and response procedures.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection findings, but all 14 action references are unpinned and two workflows grant top-level write access. The only audit finding is low-confidence cache-poisoning hygiene, so this warrants caution rather than a severe downgrade.