@types/pbkdf2

Release historycaution

The package has had no release in the last 12 months, and its latest release was nearly three years ago. This is a maintenance concern, but the package is backed by an active source project and stable type definitions.

Repo package mentioncaution

The linked repository is a monorepo and neither matches the package name nor mentions it in its README. Although this is explainable for DefinitelyTyped, the signal leaves the package-to-repository relationship less explicit.

Workflow auditcaution

All seven workflows were analyzed, all 25 action references are pinned, and there are no untrusted checkouts or script-injection findings. Medium-confidence template-injection findings remain a minor workflow-hygiene concern.