@scalar/openapi-types

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention @scalar/openapi-types, so the package-to-repository relationship is less transparent even though the organization ownership aligns.

Version stabilitycaution

Version 0.9.7 is not yet a stable major release, which adds some API-stability risk, but it is not a prerelease and recent prerelease share is zero.

Workflow auditcaution

All 23 workflows were analyzed and all use read-only permissions, with only three of 162 action references unpinned. High-confidence findings include blanket GitHub App permissions and inherited secrets; these are workflow hygiene concerns, although no untrusted checkout or script-injection path was found.