@firebase/storage-types

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, so ownership of this subpackage is less transparent; the organization-backed monorepo context partly compensates.

Version stabilitycaution

Version 0.8.5 is a stable, non-prerelease release, although 90% of recent releases were prereleases, which makes the broader version stream somewhat less predictable.

Workflow auditcaution

All 21 workflows were analyzed, all 106 action references are pinned, and permissions are read-only or job-scoped. A low-confidence cache-poisoning pattern and a high-confidence low-severity ad hoc package install are minor hygiene concerns, with no untrusted checkout or script-injection findings.