@fullcalendar/core

FullCalendar core types package

Latest 7.1.1

78%

Total Score

healthy

Active releases and a current repository support this types-only package, despite unpinned CI actions and limited security documentation.

Health Score Breakdown

Repo issue activity

The repository has ongoing issue and pull-request activity, but only 2 of 10 new issues were closed and no pull requests were merged in the last month, indicating some backlog pressure.

Repo package mention

The repository name does not match this package and its README does not mention it, creating some uncertainty about package-to-repository alignment; the organization-owned monorepo context partly explains the mismatch but does not remove it.

Repo tooling

The project uses TypeScript, Turbo, and npm scripts, but no security-scanning tools were detected, leaving a modest tooling gap.

Security policy

No repository security policy was found, reducing the project's transparency for reporting vulnerabilities.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but all 4 action references are unpinned, weakening build reproducibility and update safety.