@backstage/types

Release historycaution

The package has 117 releases over roughly five years, but no registry release in the last 12 months. The highly active repository partly compensates, though the published package cadence is a maintenance concern.

Workflow auditcaution

All analyzed action references are pinned, but two workflows use untrusted checkouts and the audit covered only 30 of 49 workflows. High-confidence template-injection and broad app-token findings are hygiene concerns, while the low-confidence cache finding carries little weight.