studiometa/ui

Security policycaution

The repository has no security policy, leaving reporting and response expectations undocumented; this is a transparency gap, though it does not outweigh the active project evidence.

Version stabilitycaution

This release is an alpha and 70% of recent releases are prereleases, so its API may still change even though the package has a stable major version line.

Workflow auditcaution

All 42 analyzed action references are unpinned, and a high-confidence finding shows the entire secrets context injected into a code-review runner. The low-confidence cache findings are hygiene concerns, but the secret overexposure materially lowers workflow trust.