discord-api-types

Repo toolingcaution

TypeScript and npm build tooling are used, but no security-scanning tools were detected; the missing scanning is a modest hygiene gap rather than evidence of poor maintenance.

Security policycaution

The repository has no security policy, leaving reporting and response expectations undocumented for consumers and contributors.

Version stabilitycaution

The current release is not a prerelease, but the recent prerelease share is 90% and the package remains below major version 1, so consumers should expect a more changeable API than in a mature stable-major package.

Workflow auditcaution

All six workflows were analyzed, with no untrusted checkout or script-injection trigger sink, and three scope permissions at job level. However, all 22 action references are unpinned, and the high-confidence template-injection finding in documentation.yml is a real workflow hygiene concern; the low-confidence cache-poisoning finding is weaker supporting evidence.