webextension-polyfill

Repository archiveddanger

The linked Mozilla repository is archived, despite being pushed recently; archived status is a severe abandonment risk for a dependency.

Release historycaution

The package has 16 releases over roughly nine years but none in the last 12 months, indicating a long release gap. Recent repository commits partly offset this, but do not show that new registry releases will continue.

Security policycaution

The repository has no published security policy, reducing transparency about vulnerability reporting and response.

Type declarationscaution

No type declarations are included for this browser API library, which makes TypeScript integration less convenient and leaves consumers without checked API types.

Workflow auditcaution

Both workflows were analyzed with no untrusted checkout, script injection, or audit findings, and all action references are pinned. One workflow has top-level write permissions, a mild hygiene concern without an untrusted trigger or sink.