@amplitude/rrweb-types

Lifecycle scriptscaution

A prepublish lifecycle script is present, so installation and publication behavior is not entirely passive; the signal does not show a severe install-time action.

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package, creating some uncertainty about the exact package-to-source association; the organization-backed monorepo context partly offsets that concern.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

Version 2.1.2 is a stable, non-prerelease release, although 90% of recent releases were prereleases, which adds some uncertainty around the recent release process.

Workflow auditcaution

All six workflows were analyzed, all 22 action references are pinned, and permissions are scoped at job level in five workflows. The audit found one high-confidence low-severity adhoc package installation in the release workflow, a minor reproducibility concern.