slate-dom

Repo package mentioncaution

The repository name does not match slate-dom and its README does not mention the package, so the package-to-repository relationship is less transparent. The repository's monorepo structure partly explains the mismatch but does not remove the verification gap.

Version stabilitycaution

Version 0.142.0 is not a prerelease, but 80% of recent releases were prereleases and the package remains below major version 1. This adds some compatibility uncertainty without indicating abandonment.

Workflow auditcaution

All four workflows were analyzed with no untrusted checkout or script-injection findings, and three use read-only permissions. However, all 12 action references are unpinned, one workflow uses an archived action with high-confidence medium severity, and the release workflow installs a package outside its lockfile.