prettier-plugin-tailwindcss

Repo toolingcaution

The repository uses TypeScript, Vitest, and build tooling, but no security-scanning tools were detected. The missing scanning coverage is a minor transparency and hygiene concern.

Security policycaution

No repository security policy was found. This is a modest transparency gap for maintainers and vulnerability reporting, not evidence that the package is unsafe.

Version stabilitycaution

Version 0.8.1 is not a prerelease, although it remains before major version 1 and 75% of recent releases were prereleases. The current release is therefore usable but carries some API-stability uncertainty.

Workflow auditcaution

All 10 action references are unpinned, and one release workflow has top-level write permissions; these are avoidable workflow-hygiene concerns. The high-confidence template-injection finding warrants attention, while the two low-confidence cache-poisoning findings carry limited weight; no untrusted checkout or script-injection paths were found.