vue-tsc

Repo toolingcaution

The project uses TypeScript, Vitest, and npm scripts, showing established build and test tooling; no repository security scanning tools were detected.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting vulnerabilities, although active maintenance and provenance provide some compensation.

Workflow auditcaution

All six workflows were analyzed with no untrusted checkouts or script injection, but all 28 action references are unpinned and the audit reports a high-confidence trusted-publishing pattern; one workflow also has top-level write permissions.