mjml-preset-core

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is reported, leaving release-origin transparency weaker than ideal.

Dependency profilecaution

The package declares 26 runtime dependencies, mostly related MJML components, which is understandable for a bundled preset but increases transitive dependency and upgrade surface.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention mjml-preset-core, so the package-to-repository relationship is less transparent; the mismatch is somewhat mitigated by the repository being the relevant MJML monorepo context.

Repo toolingcaution

Babel and npm scripts provide build tooling, but no security-scanning tools are reported, leaving a security-process gap.

Security policycaution

The repository has no SECURITY.md or other detected security policy, reducing transparency around vulnerability reporting.