@amplitude/analytics-client-common

Repo package mentioncaution

The repository name differs from the package and its README does not mention this package, creating some uncertainty about package-to-repository alignment; the organization-owned monorepo context partly offsets the name mismatch.

Security policycaution

No security policy was found, leaving disclosure and vulnerability-handling expectations undocumented for users and contributors.

Workflow auditcaution

All 11 workflows were analyzed and references are pinned, with no untrusted checkout or script-injection findings; however, the publish workflow has two high-confidence findings where an app token inherits blanket installation permissions.