@upstash/redis

Repo toolingcaution

The project uses npm scripts and TypeScript build tooling, but no security scanning tools were detected, leaving a modest transparency gap.

Security policycaution

The linked repository has no security policy, which makes vulnerability reporting less explicit for consumers and maintainers.

Version stabilitycaution

Version 1.39.0 is a stable major and not a prerelease, although 95% of recent versions being prereleases indicates a noisy release stream.

Workflow auditcaution

All five workflows were analyzed successfully with no high-severity findings or untrusted checkouts, but 58 of 67 action references are unpinned, reusable workflows inherit secrets, and publishing uses long-lived-token tooling; these are concrete workflow hygiene concerns.