@vercel/container

Repo package mentioncaution

The repository name does not match the package and its README does not mention @vercel/container, so the package's source ownership is less transparent despite the organization-backed monorepo context.

Type declarationscaution

The artifact contains no type declarations, which reduces integration ergonomics for consumers of this package.

Workflow auditcaution

The audit found high-confidence template-injection findings and one failed file analysis, while no untrusted checkout or script-injection sink was detected; this is a workflow hygiene concern rather than a severe release risk. Seventy-five of 156 action references are unpinned, and two workflows use top-level write permissions, but the write scope is not universal.