@emotion/stylis

Release historydanger

The package has 22 releases, but none in the last 12 months; its latest registry release was about 6 years and 9 months ago. That materially increases the chance that this release lacks later fixes.

Repo commit activitycaution

The linked repository recorded 0 commits and 0 active maintainers in the last 3 months. Although the repository is not archived, this provides weak evidence of current maintenance for this package.

Repo issue activitycaution

In the last month, 6 pull requests were opened but none were merged, and no issues were closed. This supports the concern that current maintenance is slow rather than demonstrating active upkeep.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention @emotion/stylis. A monorepo can explain the name mismatch, but the lack of a package mention leaves some uncertainty about package-specific ownership.

Workflow auditcaution

Both workflows have read-only permissions and no untrusted trigger or injection findings, which is positive. However, all 10 analyzed action references are unpinned, leaving avoidable build-reproducibility and action-substitution risk.