mjml-head-preview

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving the relationship between source and published artifact less transparent.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention mjml-head-preview, creating some uncertainty that this repository directly represents the package; the monorepo structure and organization backing partially mitigate that concern.

Repo toolingcaution

The repository uses Babel and npm build tooling, but has no detected security-scanning tools; the missing scanning reduces security-process transparency without indicating abandonment.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting and response expectations undocumented.

Token permissionscaution

All three workflows lack top-level permissions declarations, and none declares read-only permissions; although no top-level write permissions or dangerous workflow patterns were observed, this is a workflow-hygiene gap.