@as-integrations/express5

Release historycaution

The package has 7 releases, but none in the last 12 months; the latest release was over a year ago, which raises maintenance concerns for a young integration.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, indicating currently quiet development despite a recent repository push timestamp elsewhere.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security scanning tools were detected, leaving a transparency and maintenance gap.

Workflow auditcaution

All 8 GitHub Actions references are unpinned, and a high-confidence audit found adhoc package installation outside a lockfile. The workflows have no untrusted checkout or script-injection findings, so this is a hygiene concern rather than a severe risk.