@npmcli/git

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. This is a meaningful maintenance concern, even though the release itself is recent.

Workflow auditcaution

All 38 action references are unpinned, and four workflows grant top-level write permissions; both weaken workflow reproducibility and least privilege. High-confidence template-injection findings and a medium-confidence bot-condition finding add workflow hygiene concerns, although no untrusted checkout or script-injection sink was detected.