@rrweb/utils

This package contains the shared utility functions used across rrweb packages. See the [guide](../../guide.md) for more info on rrweb.

Latest 2.1.7

NPM

78%

Total Score

healthy

Healthy overall; frequent releases and active maintenance outweigh workflow hygiene concerns.

Health Score Breakdown

Lifecycle scripts

A prepublish lifecycle script is present, which adds some publishing complexity, but the available build provenance and repository evidence reduce concern about opaque release behavior.

Repo package mention

The repository name does not match this subpackage and its README does not mention the package, creating some uncertainty about the package-to-repository link. The organization-backed monorepo context partly offsets that concern.

Repo tooling

The repository uses established build and test tooling, including TypeScript, Vitest, and multiple bundlers. No security scanning tools were detected, leaving a modest hygiene gap.

Workflow audit

All seven workflows were analyzed and use job-level permissions, with no untrusted checkout or script-injection findings. However, one high-confidence finding exposes the entire secrets context, and 18 of 25 action references are unpinned; these are meaningful workflow hygiene risks.