pinia

Repo toolingcaution

The project uses established TypeScript, Vite, Rollup, Vitest, and npm tooling. No security scanning tooling was detected, a minor transparency gap, but the repository does provide a security policy.

Workflow auditcaution

All four workflows were analyzed without failed files, and no untrusted checkout or script-injection paths were found. However, 10 of 13 action references are unpinned, and the audit flags high-confidence trusted-publishing usage plus low-confidence cache-poisoning findings, creating a workflow hygiene concern.