@newrelic/security-agent

Dependency profilecaution

The package has 17 runtime dependencies, a meaningful integration surface for an agent, but the supplied data shows no specific dependency risk or compensating audit result.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which lowers confidence in ongoing maintenance despite the recent push and latest release.

Repo issue activitycaution

There were no new or merged pull requests and no new or closed issues in the last month, while 19 pull requests remain open; this suggests maintenance has slowed.

Repo toolingcaution

The repository uses a build tool, but no security scanning tools were detected; for an agent handling security-sensitive behavior, that is a meaningful hygiene gap.

Workflow auditcaution

All four workflows were analyzed, but all 10 action references are unpinned and a high-confidence template-injection finding may expand attacker-controlled input into code. No dangerous trigger, untrusted checkout, script injection, or broad top-level write permission was observed.