@scalar/types

Workflow auditdanger

All 23 workflows use read-only permissions and all 166 analyzed actions are pinned, but the high-confidence github-app finding reports blanket installation permissions in release.yml; repeated secrets-inherit findings add further workflow hygiene risk.

Maintainerscaution

Seven publishing accounts are present and five use the organization domain, while hwkr (hwkr.me) and hanspagel (hanspagel.com) are outside-domain accounts that add account-hygiene caution; organization backing partly compensates.

Repo package mentioncaution

The repository name differs from the package name and its README does not mention @scalar/types; this is plausible for a monorepo subpackage but leaves package ownership less transparent.

Version stabilitycaution

Version 0.23.1 is not prerelease, although the package remains on a 0.x major version, so compatibility expectations are somewhat lower than for a stable-major release.