@types/ejs

Release historycaution

The package has 35 releases since May 2016, but none in the last 12 months and the latest release was published in November 2023. That is a meaningful freshness concern, although the package is a generated type-definition subpackage whose source repository remains active.

Token permissionscaution

Five workflows declare read-only permissions and none declare top-level write permissions. Two workflows lack top-level permissions declarations, which is a minor configuration gap but not a demonstrated dangerous capability.