package-manager-detector

Repo toolingcaution

The project uses TypeScript, Vitest, Unbuild, and npm scripts, indicating a defined build and test toolchain. No security scanning tool was detected, which is a minor hygiene gap.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings, and permissions are scoped or read-only. However, both of the two action references are unpinned, leaving a build-integrity hygiene gap.