@amplitude/plugin-page-view-tracking-browser

Repo package mentioncaution

The repository name does not match the package and its README does not mention this package. Although a monorepo can explain the name mismatch, the absent README mention leaves package ownership less transparent.

Security policycaution

No repository security policy was found. That is a transparency gap for a package distributed to many consumers, although active development and Semgrep scanning partly compensate.

Workflow auditcaution

All 11 workflows were analyzed, all 64 action references are pinned, and no untrusted checkout or script-injection paths were found. However, three high-confidence findings report GitHub app tokens inheriting blanket installation permissions in the publish workflow, creating a workflow-credential caution.