vue-component-meta

Repo toolingcaution

The project uses TypeScript, Vitest, and npm scripts, but no security scanning tools were detected; the build tooling is sound while security coverage is limited.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance unclear for a package with active development.

Workflow auditcaution

All six workflows were analyzed with no untrusted checkouts or script injection, but all 28 action references are unpinned and one workflow grants top-level write permissions; the trusted-publishing finding is informational and provenance is present.