remend

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. Although this may be a monorepo sub-package, the lack of an explicit package reference makes source ownership less transparent.

Workflow auditcaution

All four workflows were analyzed with no high- or medium-severity findings, but all 11 action references are unpinned, three workflows grant top-level write permissions, and the release workflow installs a package outside a lockfile. These are meaningful workflow hygiene concerns, though no untrusted checkout or script-injection sink was found.