arch-tsdown-monorepo
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard configuration templates for pnpm monorepos. All scripts and configurations follow established development patterns.
- [SAFE]: The release workflow template utilizes npm Trusted Publisher (OIDC), a security-positive feature that eliminates the need for long-lived npm tokens in CI secrets.
- [SAFE]: Git hook instructions include the
--ignore-scriptsflag, ensuring that third-party dependency scripts do not execute automatically during commit hooks, which mitigates local supply chain risks. - [SAFE]: External references and dependencies point to well-known community tools and repositories or the vendor's own official repositories.
Audit Metadata