resend

Maintainerscaution

The organization-backed project has 14 registry publishers, but many use consumer email domains and cisneiros and lucasfcosta use outside domains. This is account-hygiene caution, while the organization's active contributor base compensates for maintenance-capacity concerns.

Repo toolingcaution

The repository uses TypeScript, Vitest, and npm scripts, but no security-scanning tools were detected. The missing scanning tooling is a modest transparency gap, not evidence of unsafe code.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations unclear. This is a documentation gap rather than evidence of abandonment.

Workflow auditcaution

All 10 workflows were analyzed, all action references are pinned, and nine workflows use read-only permissions. One preview-release workflow has top-level write permissions and the audit flags trusted publishing; the low-confidence cache finding is only a hygiene concern.