@firebase/installations

Repo package mentioncaution

The repository name differs from the package and its README does not mention this package, creating a package-ownership ambiguity; the linked Firebase monorepo context reduces but does not remove that concern.

Version stabilitycaution

Version 0.6.24 is not a stable-major release and 80% of recent releases are prereleases, which adds some maturity uncertainty despite the current release not being a prerelease.

Workflow auditcaution

All 21 workflows were analyzed with no untrusted checkouts, script injection, top-level write permissions, or unpinned actions; the high-severity cache-poisoning pattern has low confidence, while the high-confidence adhoc-packages finding is a minor hygiene concern.