react-zoom-pan-pinch

Repo toolingcaution

The repository uses TypeScript and Rollup for builds, but no security scanning tools were detected; this is a modest repository-hardening gap rather than a maintenance failure.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response procedures.

Token permissionscaution

One of two workflows lacks top-level token permissions, while none declares top-level write permissions and one is explicitly read-only; the limited gap warrants caution but is not severe.