@webpack-cli/info

Release historycaution

The package has 34 releases but none in the last 12 months, which suggests registry release activity has paused. Active repository commits and pull-request merges provide meaningful compensation.

Workflow auditcaution

All six workflows were analyzed with no untrusted checkouts or script injection, and all action references are pinned. Three workflows grant top-level write access, while high-confidence bot-condition and GitHub App findings add workflow hygiene concerns, though no dangerous trigger-and-sink combination was observed.