@amplitude/analytics-types

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, creating some uncertainty about the exact package-to-repository link; the organization-backed monorepo context makes a sub-package explanation plausible but does not eliminate the gap.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations less transparent; active development and security scanning partly compensate but do not remove the gap.

Token permissionscaution

All 11 workflows lack top-level token permissions, which is weaker than explicit least-privilege configuration, although none declares top-level write permissions and four constrain permissions at job level.