@types/resolve

Release historycaution

The package has existed since 2016 with 19 releases, but it has had no release in nearly three years. Active repository work partly offsets the stale registry cadence, though the release-specific gap remains a maintenance caution.

Workflow auditcaution

All seven workflows were analyzed, with no untrusted checkouts or script injection and all 25 action references pinned. Four medium-confidence template-injection findings are a workflow hygiene concern, but they are not corroborated by dangerous triggers or sinks.