@types/validate-npm-package-name

Release historycaution

The package has had no registry release in nearly three years, which raises a maintenance concern; however, the linked source project shows current activity and the package is a stable type-definition release.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, which makes package ownership less transparent; the repository is nevertheless a large DefinitelyTyped monorepo and the artifact README identifies the relevant source path.

Workflow auditcaution

All seven workflows were analyzed, none use untrusted checkout or script-injection patterns, and all 25 action references are pinned. Four medium-confidence template-injection findings remain as hygiene concerns, but no dangerous trigger or high-severity issue corroborates them.