chrome-launcher

Repo commit activitycaution

There were no commits and no active maintainers in the repository during the last three months. This is the main maintenance concern, although the current release and recent repository push provide some counterweight.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security scanning tools were detected. The build setup is positive, while the missing scanning is a modest hygiene gap.

Security policycaution

No security policy was found in the linked repository, reducing the transparency of vulnerability reporting and response expectations.

Workflow auditcaution

All three workflows were analyzed, but all nine action references are unpinned and one workflow grants top-level write permissions. The audit also found a high-severity cache-poisoning pattern with low confidence and a high-confidence ad hoc package install; these are workflow hygiene concerns rather than standalone disqualifiers.