schema-utils

Lifecycle scriptscaution

The package has a prepare script, which adds install-time build behavior and some operational complexity. The repository's explicit build tooling and active maintenance provide context, so this is only a minor caveat.

Token permissionscaution

One workflow lacks top-level permissions and the release workflow grants write permissions, leaving some GitHub Actions privilege configuration less restrictive than ideal. This is a hygiene concern, not evidence of unsafe behavior by itself.