@amplitude/analytics-node

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations less transparent; this is a modest documentation gap rather than evidence of abandonment.

Workflow auditcaution

All 11 workflows were analyzed with no untrusted checkouts, script injection, or unpinned action references, but three high-confidence findings report an app token inheriting blanket installation permissions in the publishing workflow. That creates a meaningful release-workflow hygiene concern.