@walletconnect/jsonrpc-types

Release historycaution

The package has 9 releases since July 2021, but its latest release was over two years ago and there were no releases in the last 12 months. This raises maintenance and abandonment concerns despite a previously regular release interval.

Repo commit activitycaution

The linked repository recorded no commits and no active maintainers in the last three months. That supports the release-history concern, although the repository was pushed recently and is not archived.

Workflow auditcaution

All four workflows were analyzed, with no untrusted checkouts or script-injection findings, but seven of eight action references are unpinned and the audit found high-confidence template-injection patterns in publishing workflows. The trusted-publishing finding is informational in severity but still indicates publishing hygiene that warrants attention.