The coding guidelines are for some file types not respected in the outputted .editorconfig of the packagebuilder.
yaml: 4 spaces instead of 2
typoscript: 4 spaces instead of 2
js: 4 spaces instead of 2
I can create a PR if you say it's a bug and not intended.