@firebase/remote-config-compat

Maintainerscaution

Three of four publishing accounts use the Google domain, consistent with organization backing. One Gmail-based publisher account, feiyang.chen, is an account-hygiene caution rather than evidence of limited maintenance capacity.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention this package, creating an ownership-transparency concern. The Firebase organization and monorepo context partly compensate, but the signal remains a caution.

Repo toolingcaution

The repository uses established build tools including TypeScript, Rollup, Webpack, Babel, and Nx, supporting a structured build process; no security scanning tools were detected.

Version stabilitycaution

Version 0.2.30 is a stable release, but 75% of recent releases were prereleases, which adds some release-channel uncertainty.

Workflow auditcaution

All 21 workflows were analyzed, all 106 action references are pinned, and permissions are read-only or job-scoped. A high-confidence low-severity adhoc package installation warrants caution; the low-confidence cache finding is hygiene only.