@traceloop/instrumentation-anthropic

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance warning that conflicts with the recent registry release cadence.

Repo package mentioncaution

The repository name differs from the package and its README does not mention this package. A name mismatch is normal for a monorepo, but the lack of a README mention leaves package-to-repository ownership less transparent.

Security policycaution

No SECURITY.md or equivalent security policy was found, leaving vulnerability-reporting expectations unclear.

Version stabilitycaution

Version 0.27.0 is not a prerelease, although the package remains below 1.0 and 15% of recent releases were prereleases; this is a modest maturity caveat rather than a severe concern.

Workflow auditcaution

Both workflows were analyzed and scope job permissions, but all 13 action references are unpinned; high-confidence findings include two unpinned container images and a release app token with blanket installation permissions. The low-confidence cache finding is only hygiene.