@types/cls-hooked

Release historycaution

The package has had no releases in the last 12 months, and its latest release was nearly two years ago. The active upstream repository partly offsets this for stable type definitions, but the stale package cadence remains a maintenance concern.

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, which creates a provenance ambiguity. The mismatch is understandable for a subpackage in the DefinitelyTyped monorepo, so this is only a mild concern.

Workflow auditcaution

All seven workflows were analyzed, all 25 action references are pinned, and no untrusted checkout or script-injection sinks were found. Four medium-confidence template-injection findings remain hygiene concerns, though no high-severity findings were reported.