@walletconnect/logger

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance and abandonment concern despite recent registry releases.

Build provenancecaution

This release has no build provenance attestation or trusted-publisher identity, so consumers cannot independently verify how the artifact was produced.

Repo package mentioncaution

The linked repository name does not match this package and its README does not mention @walletconnect/logger. Although a monorepo can contain subpackages, both indicators together leave package ownership less transparent.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

The audit found high-confidence template-injection findings in publishing workflows, 7 of 8 action references unpinned, and a long-lived publishing-token pattern. No untrusted checkout or script-injection sink was found, limiting the severity but not removing the workflow hygiene concern.