uint8arrays

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, despite the recent release, leaving ongoing development capacity less clear.

Security policycaution

The repository has no security policy, which leaves vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All four analyzed workflows use unpinned actions, and two have top-level write permissions; the pull_request_target workflow has no untrusted checkout or script-injection sink, so this is a hygiene concern rather than a severe workflow risk.