@amplitude/rrweb-utils

Lifecycle scriptscaution

A prepublish lifecycle script is present. It can add publishing-time behavior, but this script is not an install-time execution path and is therefore only a minor concern.

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package, creating some uncertainty about package-to-repository mapping. The matching organization and monorepo-style repository context partly compensate.

Security policycaution

No repository security policy was found. This is a transparency gap for a maintained package, although it does not by itself indicate abandonment or unsafe code.

Workflow auditcaution

All six workflows were analyzed, none use unpinned actions, and five scope permissions at the job level. The audit found one high-confidence, low-severity adhoc-packages issue in the release workflow, where a package is installed outside a lockfile.