vuetify

Package scaffoldingcaution

The artifact includes a substantial README and tests, while the exact version has GitHub release notes and the repository has both tests and a changelog. The release notes also say funding is running low and contributor compensation has been reduced, which is a sustainability caution.

Repo toolingcaution

The project uses established TypeScript, Rollup, Vite, Babel, and npm tooling, but no security scanning tools were detected, leaving a modest process gap.

Workflow auditcaution

All six workflows were analyzed with no untrusted checkout or script-injection trigger counts, but two high-confidence template-injection findings appear in nightly.yml, 24 of 34 action references are unpinned, and ci.yml installs a package outside a lockfile. These are meaningful workflow hygiene and supply-chain cautions, although no dangerous trigger was reported.