@eslint-community/regexpp

Release historycaution

The package has 27 releases over nearly four years, but only one release in the last 12 months; the latest release is evidence of continued publishing, while the slower recent cadence warrants some caution.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful recent-maintenance gap, although the package has a recent release and organization backing.

Workflow auditcaution

Both workflows use top-level write permissions, and 12 of 14 action references are unpinned; the high-confidence unsound-contains finding and adhoc package installation are additional workflow hygiene concerns, though no untrusted checkout or injection sink was found.