@emotion/css

Release historycaution

The package has 79 releases over more than eight years, but none in the last 12 months and its latest release was nearly two years ago. This materially raises maintenance and abandonment concern despite the historically regular cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. This is a significant recent-maintenance gap, partly offset by the non-archived repository and recent release activity elsewhere.

Repo issue activitycaution

The repository still has incoming pull requests, including eight opened in the last month, although none were merged in that period. This shows some ongoing attention but not strong recent delivery.

Repo toolingcaution

The repository uses established TypeScript, Babel, npm, and webpack tooling, but no security-scanning tools were detected. The build setup is credible; the missing scanning is a modest hygiene gap.

Workflow auditcaution

Both workflows use read-only permissions and the audit found no high- or medium-confidence findings, but all 10 analyzed action references are unpinned. That leaves avoidable workflow reproducibility and action-integrity risk without evidence of an active exploit path.