@google-cloud/opentelemetry-resource-util

Registry deprecationdanger

The entire package is marked deprecated, not just this release, and provides no replacement package in the registry metadata. The package README directs users to newer resource detection and OTLP exporter packages, making adoption unsuitable.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention this package, so package ownership cannot be confirmed from this signal alone. The repository's organization backing and broader package tree partly compensate, but the mismatch remains a transparency caution.

Workflow auditcaution

Both workflows were fully analyzed with no reported audit findings, unsafe untrusted checkouts, or script injections. However, all 10 analyzed action references are unpinned, which is a smaller reproducibility and supply-chain hygiene gap.