@mendable/firecrawl-js

Maintainerscaution

Three of five publishing accounts use the sideguide.dev domain, while abimaelmartell and mogery publish from Gmail accounts; those two accounts create a modest account-hygiene concern, though organization backing and active contributors compensate for it.

Repo package mentioncaution

The linked firecrawl repository neither matches the package name nor mentions it in its README, so the package's ownership and source relationship are less transparent despite the organization-backed repository.

Security policycaution

The repository has no security policy file, leaving vulnerability reporting and response expectations less transparent than they could be.

Workflow auditcaution

The audit found no high- or medium-severity issues and no untrusted checkout or script injection, but 56 of 101 action references are unpinned, five high-confidence trusted-publishing findings were reported, and three of 33 workflows were not analyzed; this is a workflow-hygiene concern rather than a severe release risk.