@browserbasehq/stagehand

Maintainerscaution

The package has eight registry maintainers and clear organization backing through browserbase.com. The consumer accounts seanmcguire12, zerofool, and desaadi, plus outside account nosaj, add account-hygiene caution, but do not indicate maintenance capacity by themselves.

Security policycaution

The repository has no SECURITY.md or equivalent security policy, leaving vulnerability-reporting procedures less transparent.

Version stabilitycaution

Version 4.2.1 is a stable, non-prerelease major release, but 90% of recent releases were prereleases, which adds some predictability risk.

Workflow auditcaution

All seven workflows were analyzed, all 89 action references are pinned, and no untrusted checkout or script injection was found. High-confidence findings include unpinned tools, inherited secrets, and ad hoc package installs; these are meaningful release-workflow hygiene concerns but not severe on their own.