@types/async-retry

Release historycaution

The package has existed for over eight years with 14 releases, but it has had no release in the last 12 months and the latest release was nearly two years ago. This slows confidence in ongoing package-specific maintenance, though the linked project remains active.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package. That is plausible for a monorepo, but the missing direct reference leaves some uncertainty that this repository is the intended source.

Workflow auditcaution

All seven workflows were analyzed with no untrusted checkouts, script injection, broad top-level write permissions, or unpinned action references. Medium-confidence template-injection findings in CI are a hygiene concern, but no dangerous trigger-and-sink combination corroborates them.