signature_pad

Repo toolingcaution

The project uses TypeScript, esbuild, and npm scripts, showing a defined build process. No security scanning tools were detected, leaving a modest security-hygiene gap.

Security policycaution

No repository security policy was found. This is a transparency gap, but it is outweighed by the project's active maintenance and other release controls.

Workflow auditcaution

The single workflow was fully analyzed, has read-only permissions, and has no untrusted checkouts or injection findings. All eight action references are unpinned, which weakens build reproducibility and supply-chain hygiene.