@octokit/webhooks-methods

Name lookalikedanger

The package name resembles `methods`, which has far more monthly downloads, and the README identifies the package as a lookalike. Although artifact overlap is 0 and it does not borrow the other package's identity, consumers could still select this package unintentionally.

Release historycaution

There have been no releases in the last 12 months, despite a prior median release interval of about 41 days. The linked repository was pushed recently, which provides some maintenance context but does not replace a current release.

Workflow auditcaution

All 19 analyzed action references are unpinned, creating avoidable build-integrity risk. The audit found no untrusted checkout, script injection, or other reported findings, so this is a hygiene concern rather than a severe workflow compromise.