conventional-changelog-eslint

Registry deprecationdanger

npm marks the entire package deprecated and recommends conventional-changelog-conventionalcommits or conventional-changelog-angular, making this release unsuitable for a new dependency despite other healthy project evidence.

Repo package mentioncaution

The repository name does not match this package and its README does not mention it, so the package's relationship to the linked monorepo is less transparent; the monorepo structure partly explains the mismatch.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations unclear even though the project is actively maintained.

Workflow auditcaution

All 37 analyzed action references are unpinned, and one workflow grants top-level write access, creating avoidable workflow supply-chain and permission risk. No dangerous triggers, untrusted checkouts, script injection, or audit findings were detected.