vite-plugin-inspect

Repo toolingcaution

The project uses TypeScript, Vite, and npm scripts, but no security-scanning tools were detected, leaving a modest repository-hygiene gap.

Security policycaution

No repository security policy was found, which reduces transparency for reporting vulnerabilities even though the package otherwise has active maintenance and provenance.

Workflow auditcaution

Both workflows were analyzed without untrusted checkouts or script injection; one action is unpinned, which is acceptable as a minority. The high-confidence trusted-publishing finding is a workflow hygiene concern, while the low-confidence cache-poisoning finding is not material on its own.