unplugin

Repo issue activitycaution

The repository remains active with new issues and pull requests during the last month, although none were closed or merged in that period. This is a minor process concern but not evidence of abandonment given the recent commits and releases.

Repo toolingcaution

The project uses established build and test tools, including TypeScript and Vitest, but no security-scanning tools were detected. The missing security automation is a modest transparency and maintenance gap.

Security policycaution

No repository security policy was found. This makes vulnerability reporting less transparent, though active maintenance, organizational backing, and verified provenance compensate for much of the concern.

Token permissionscaution

Two of four workflows lack top-level token permissions, although none declare top-level write access and the analyzed workflows otherwise include read-only permissions. This is a workflow-hygiene caution rather than a severe risk.