@types/swagger-ui-express

Release historycaution

The package has existed for over 8 years with 11 releases, but it has had no release in the last 12 months; the active source repository partly compensates for this slower package cadence.

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, which creates a small provenance-transparency concern; this is partly expected because DefinitelyTyped is a large monorepo containing many packages.

Token permissionscaution

Five workflows declare read-only permissions and none declare top-level write permissions; two omit top-level permissions, leaving a minor configuration gap but no demonstrated excessive access.