remark-smartypants

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security-scanning tool was detected. For this small package, that is a modest security-hygiene gap rather than evidence of abandonment.

Security policycaution

No repository security policy was found. This limits disclosure guidance for users, although the package is small and the repository otherwise shows current maintenance.

Workflow auditcaution

All four GitHub Actions references are unpinned, which weakens build reproducibility and action supply-chain hygiene. The audit analyzed the single workflow completely and found no untrusted checkout, script injection, dangerous trigger, or high-severity finding.