@types/webfontloader

Release historycaution

The package has 22 releases but none in the last two years; this is a maintenance caution, partly offset by the linked repository’s current activity.

Repo package mentioncaution

The linked repository is the DefinitelyTyped monorepo, but it neither matches the package name nor mentions it in the README; this is a caution about package-to-repository traceability, though monorepo hosting is otherwise consistent with the project backing.

Workflow auditcaution

All seven workflows were analyzed, all 25 action references are pinned, and permissions are mostly read-only; medium-confidence template-injection findings remain a modest hygiene concern.