@scalar/openapi-upgrader

Maintainerscaution

Seven accounts can publish, with five using the Scalar domain and organization backing established separately; hwkr (hwkr.me) and hanspagel (hanspagel.com) are outside-domain publishing accounts, which is an account-hygiene caution rather than evidence of limited maintenance capacity.

Version stabilitycaution

Version 0.4.4 is not a stable major release, which adds some API-maturity uncertainty, but it is not a prerelease and recent releases contain no prereleases.

Workflow auditcaution

All 23 workflows were analyzed, use read-only permissions, and have no untrusted checkout or script-injection findings. However, a high-confidence blanket GitHub App permission finding, repeated secrets inheritance, and publishing commands using long-lived credentials create a meaningful workflow hygiene concern.