contentful-resolve-response

Repo toolingcaution

The project uses Babel and npm build tooling, but no security scanning tools were detected; this is a modest transparency gap rather than a dependency-blocking concern.

Type declarationscaution

The package has no type declarations, which makes integration less convenient for TypeScript consumers, though the README documents a focused JavaScript API.

Workflow auditcaution

All four workflows were analyzed with no untrusted checkouts or script injection, and permissions are scoped at job level or read-only. However, all 10 action references are unpinned and a high-confidence low-severity audit found an ad hoc package install in the release workflow.