miniflare

Licensecaution

The package declares MIT, while the linked repository license file was detected as Apache-2.0. That mismatch is a transparency concern, although both the package and repository provide licensing information.

Version stabilitycaution

This release is a prerelease and all recent releases are prereleases, so consumers wanting a stable contract should account for alpha-version change risk despite the stable major line.

Workflow auditcaution

All 28 workflows were analyzed and all action references are pinned, but two pull_request_target workflows combine with untrusted checkouts, and a medium-confidence high-severity bot-condition finding was reported. Low-confidence-independent hygiene findings are less significant but still indicate workflow complexity.