ml-array-rescale

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, a maintenance concern, although the recent release and repository push provide some compensating evidence.

Repo toolingcaution

The project uses TypeScript, Vitest, and npm scripts, and the repository has tests, but no security-scanning tooling was detected.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All seven analyzed action references are unpinned, and the release workflow uses long-lived registry publishing credentials; the audit found no untrusted checkouts or script injection, so this is a hygiene concern rather than a severe workflow risk.