@borewit/text-codec

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning despite the recent release and push evidence.

Security policycaution

The repository has no security policy. For a small library this is a transparency and incident-reporting gap, though it is not evidence of unsafe code by itself.

Workflow auditcaution

All 14 analyzed action references are unpinned, weakening build reproducibility and action supply-chain control. The pull_request_target workflow has no untrusted checkout or script-injection findings, and the audit completed fully.