sax

Repo toolingcaution

The repository reports no build tool or security scanning tool. This is a hygiene gap, but the small, dependency-free package and active source maintenance limit its weight.

Workflow auditcaution

The sole workflow was fully audited with no untrusted checkout, script injection, or high-confidence findings, but both action references are unpinned, weakening reproducibility.