@types/css-font-loading-module

Release historycaution

The package has had no releases in the last 12 months, which is a maintenance caution, but its 2017–2024 history and the actively maintained source repository reduce abandonment concern.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, creating some uncertainty about repository association; the package README does point to the relevant DefinitelyTyped subdirectory, which partly compensates.

Workflow auditcaution

All seven workflows were analyzed, all 25 action references are pinned, and no untrusted checkout or script-injection paths were found. Four medium-confidence template-injection findings are workflow hygiene concerns, but no dangerous trigger or high-severity finding corroborates them.