@amplitude/rrweb-snapshot

Lifecycle scriptscaution

A prepublish lifecycle script is present. This is a limited supply-chain and publishing-complexity concern, but it is not evidence of unsafe installation behavior by itself.

Security policycaution

No repository security policy was found, leaving vulnerability reporting expectations unclear. This is a transparency gap, though it is not evidence that the package is unsafe.

Version stabilitycaution

Version 2.1.2 is a stable, non-prerelease release on a stable major version. The recent prerelease share is high at 90%, which adds some stability uncertainty but does not outweigh the current stable release.

Workflow auditcaution

All six workflows were analyzed, references were fully pinned, and no untrusted checkout or script-injection paths were found. A high-confidence low-severity finding reports an ad hoc package installation in the release workflow, which is a modest hygiene concern.