@appium/types

Repo package mentioncaution

The linked Appium monorepo name does not match the package and its README does not mention @appium/types, leaving package ownership less explicit even though a monorepo mismatch can be ordinary.

Repo toolingcaution

The project uses TypeScript, Gulp, Nx, and npm scripts for builds, but no security-scanning tools were detected; the missing scanning is a minor transparency gap.

Workflow auditcaution

All 33 action references are unpinned, and high-confidence template-injection findings affect manual release and version workflows; however, no untrusted checkout or script-injection paths were found, so this is workflow hygiene rather than a standalone severe risk.