@cloudflare/vitest-pool-workers

Package scaffoldingdanger

The package includes a README, while the source repository has tests and a changelog. However, the README explicitly says this package was renamed and will receive no future updates, with `@cloudflare/vitest-plugin` as the replacement.

Licensecaution

The package declares MIT, but the linked repository license file was detected as Apache-2.0, leaving licensing terms unclear for consumers.

Registry deprecationcaution

The registry does not mark the package as deprecated, but the published README independently states that the package is discontinued; the explicit package guidance is more consequential for adoption.

Repo package mentioncaution

The linked repository is an organization monorepo whose name does not match the package, and its README does not mention the package. The mismatch is plausible for a subpackage, but the missing README mention leaves some package-to-repository transparency uncertainty.

Workflow auditcaution

All 28 workflows were analyzed with no failed files and all 65 action references pinned. The audit found a medium-confidence high-severity bot-condition issue and two high-confidence adhoc package installations; untrusted checkouts and several write-scoped workflows add caution, though no script injection was detected.