@appium/schema

Repo package mentioncaution

The repository name does not match the package and its README does not mention @appium/schema, so package ownership is less transparent; the monorepo context makes a name mismatch ordinary but does not remove the missing mention.

Repo toolingcaution

The project uses established build tooling, but no security scanning tools were detected; this is a modest transparency gap rather than a dependency blocker.

Workflow auditcaution

All 16 workflows were analyzed with no untrusted checkouts or script-injection counts, but high-confidence template-injection findings affect release workflows, all 33 action references are unpinned, and high-confidence ad hoc package installs remain. These are release-hygiene cautions, although the low-confidence cache finding is not independently material.