@types/vinyl

Release historycaution

The package has 33 releases since May 2016, but none in the last 12 months and the latest release was over two years ago. This lowers freshness, though active repository work partly compensates.

Repo package mentioncaution

The repository is an expected monorepo for @types packages, so the name mismatch alone is ordinary. However, it neither matches the package name nor mentions it in the README, leaving some uncertainty about the exact source mapping.

Workflow auditcaution

All seven workflows were analyzed with no untrusted checkouts, script-injection counts, or broad top-level write permissions; all action references were pinned. Four medium-confidence template-injection findings are a workflow hygiene concern, not a severe risk on their own.