@types/buffer-from

Release historycaution

The package has had no release in roughly three years, which is a maintenance caution for a dependency. Its mature age and stable type-definition role partly offset the sparse release cadence.

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, creating a provenance clarity caution. The package README nevertheless identifies the expected DefinitelyTyped path for these definitions.

Workflow auditcaution

All seven workflows were analyzed with no untrusted checkouts or script injections, and all 25 action references are pinned. Medium-confidence template-injection findings remain hygiene concerns, but no dangerous trigger or sink corroborates them.