A changelog entry generator for git that writes hashes
84%
Total Score
healthy
Healthy: sustained maintenance and verified build provenance make this release a sound dependency despite a repository naming gap.
The repository name does not match the package and its README does not mention the package; while a monorepo subpackage can explain the name mismatch, the missing README mention leaves package ownership less transparent.
All three workflows were analyzed, use read-only permissions, and pin all 19 action references. The audit still flags high-confidence trusted-publishing workflow hygiene, although the release also has provenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@changesets/types Version ^7.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.