@netlify/dev-utils

Maintainerscaution

Four of five registry publishers use the netlify.com domain, consistent with the organization-backed repository. The one consumer-domain account, youvalv (gmail.com), is a minor account-hygiene concern rather than evidence of limited maintenance capacity.

Repo toolingcaution

The project uses npm scripts and TypeScript build tooling. No security scanning tool was detected, a modest process gap, but other evidence shows active maintenance and provenance.

Workflow auditcaution

The audit completed all six workflows with no untrusted checkout or script-injection findings, but 15 of 19 action references are unpinned. A high-confidence template-injection finding and several high-confidence ad hoc package installs are workflow hygiene concerns; the template finding has no reported dangerous trigger alongside it.