@envelop/types

Release historycaution

The package has existed for about 5 years with 741 releases, but only 2 releases occurred in the last 12 months; this suggests slower recent publishing despite current repository activity.

Repo package mentioncaution

The linked repository name does not match @envelop/types and its README does not mention the package, creating a meaningful concern that the release may be associated with a broader or mismatched repository rather than clearly documented there.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting guidance undocumented. This is a transparency gap but not evidence that the package is unsafe to use.

Token permissionscaution

Five workflows lack top-level permission declarations and the release workflow grants top-level write access, so workflow privileges are less explicitly minimized than ideal.

Version stabilitycaution

Version 5.2.2 is a stable, non-prerelease major version, although 85% of recent versions were prereleases, which adds some release-channel uncertainty.