node-mock-http

Repo toolingcaution

The project uses TypeScript, npm scripts, and unbuild, but no security scanning tools were detected. The missing scanning is a modest maintenance and security-hygiene gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear; this is a transparency gap rather than evidence of unsafe code.

Workflow auditcaution

Both workflows were analyzed with no high- or medium-severity findings, no untrusted checkout or script injection, and all six actions pinned. High-confidence low-severity adhoc-package findings show packages are installed outside the lockfile, so workflow reproducibility is slightly weaker.