@eslint/config-array

Repo toolingcaution

The project uses TypeScript, Vite, npm scripts, and Rollup, showing an established build process. No security-scanning tool was detected, which is a minor hygiene gap rather than evidence of abandonment.

Version stabilitycaution

Version 0.23.5 is not a stable-major release, but it is not a prerelease and recent releases contain no prerelease versions, so the maturity concern is limited.

Workflow auditcaution

All seven workflows were analyzed with no untrusted checkouts or script injection, and four use read-only permissions. However, 20 of 22 action references are unpinned, three workflows grant top-level write access, and high-confidence adhoc-package findings remain; these are workflow hygiene concerns without an untrusted trigger and sink combination.