@scalar/schemas

Schemas for Scalar packages

Latest 0.13.2

78%

Total Score

healthy

Active organization-backed project with frequent releases, but workflow credential findings and a repository/package naming mismatch add caution.

Health Score Breakdown

Maintainers

Seven registry maintainers are listed, with five using the organization domain scalar.com. The two outside-domain accounts, hwkr (hwkr.me) and hanspagel (hanspagel.com), are an account-hygiene caution, though organization backing offsets bus-factor concerns.

Repo package mention

The repository name does not match @scalar/schemas and its README does not mention the package, so the package-to-source relationship is less transparent even though a monorepo subpackage name mismatch can be ordinary.

Version stability

Version 0.13.2 is not yet on a stable major version, which adds some API-change risk, but it is not a prerelease and recent releases contain no prerelease share.

Workflow audit

All 23 workflows were analyzed and use read-only permissions with no untrusted checkout or script-injection findings, but a high-confidence blanket app-token permission, repeated inherited secrets, ad hoc package installation, and long-lived publishing-token findings weaken workflow hygiene.