multipasta

Repo toolingcaution

The project uses TypeScript, Vitest, Babel, and npm scripts, indicating a structured build and test setup. No security scanning tools were detected, which is a minor hygiene gap.

Security policycaution

No repository security policy was found. This reduces transparency for reporting vulnerabilities, though the active repository and tested source provide some compensating evidence.

Workflow auditcaution

All three workflows were analyzed with no dangerous trigger or untrusted-checkout findings, but all seven action references are unpinned and the build installs a package outside a lockfile. These are workflow supply-chain hygiene concerns, not severe risks on their own.