slice-ansi

Build provenancecaution

No build attestation or trusted-publisher provenance was detected, leaving publication origin less independently verifiable despite the otherwise established project backing.

Repo commit activitycaution

There were no commits or active maintainers in the last 3 months, a maintenance concern, but the repository was pushed today and the release history shows recent publication activity.

Repo toolingcaution

The repository uses TypeScript build tooling, but no security-scanning tools were detected; this is a modest transparency and hygiene gap.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or untrusted-trigger sinks. However, both referenced actions are unpinned, so their versions are not fixed for reproducible builds.