launchdarkly-js-client-sdk

Package scaffoldingcaution

The package includes a substantial README and release notes, but explicitly tells users to use @launchdarkly/js-client-sdk because future releases will come from the renamed project. That makes this release a weaker choice for new integrations.

Repo bus factorcaution

One contributor made all three commits in the last three months. Organization ownership provides some handoff capacity, but the observed recent activity is still concentrated.

Repo commit activitycaution

Only three commits were made in the last three months, so recent maintenance is limited even though the repository is current and the package is still releasing.

Workflow auditcaution

All five workflows were analyzed with no audit findings, no untrusted checkouts, and no script injection. Ten of 13 action references are unpinned and one workflow has top-level write permissions, which are hygiene concerns but not severe on their own.