That's my concern as well.. FWIW, you can dynamically set the content in most UI frameworks for the raw SVG content, which can use CSS properties for attribute usage beyond a single color... so you could use var(--brand-color) and match against body.dark or body.light for adjusting an accent color as well.
Assuming your light/dark integration changes the html or body element as appropriate, most will/do just that. I will generally detect for localStorage falling back to native preference, then set the html element appropriately as well as integration with my UI toolkit as such. I do similar for handling various side-menu states combined with breakpoint integrations.
If you have the "real" content, then why would you need a skeleton? I get that it uses the DOM values... but you'd need to have a placeholder for say "Last, First" or "123 any street" while the real data is loading, one would assume while the real data is loaded... that's the point of skeletons, generally speaking.
Kinda cool.. but you need to have placeholder values while loading, as well as assuming you aren't using a UI toolkit that already includes a skeleton component wrapper.
Interesting... though it seems like this and pixi.js are pretty large in terms of npm payload... the demo itself seems a little bit smaller, but still really large for what it is.
Updated title to more closely match the link and github repo description. Tend to frown on submissions with the term "free" attached, or sensationalist titles.
Package seems interesting enough, would recommend also scanning uploads and extracted archives with ClamAV in addition to this tool.
I'm only slightly concerned about the distribution size of the delivered package from npm, not particularly bad as it's a server-side only package, but still on the heavy side. In practice, you might want to use a worker instead of in-process inspections, similarly may even want to use an event sync/worker (Lambda/Function/Worker) as opposed to even in the same application in practice.
Would be nice to see performance testing for the checks in question... Would be nice if the site listed self-hosted and prominent cloud alternatives as well as some performance metrics.