@pnpm/lockfile-types

Release historycaution

The package has 43 releases over roughly seven years, but no releases in the last 12 months and its latest registry release was over two years ago. Active repository work partly offsets this, but the published release appears stale.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention @pnpm/lockfile-types, so package ownership cannot be confirmed from the repository evidence alone.

Workflow auditcaution

All 26 workflows were analyzed with no high- or medium-severity findings, no untrusted checkouts, no script injection, and all 226 action references pinned. One high-confidence low-severity adhoc-packages finding remains because the release workflow installs a package outside a lockfile.