@ethersproject/address

Release historycaution

The package has 42 releases over roughly seven and a half years with a historical median interval of about 24 days, but no releases in the last 12 months. The recent pause lowers maintenance confidence, though the latest release was a documented security update.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern for a package whose latest registry release is also more than a year old.

Repo toolingcaution

The project uses Rollup, TypeScript, and npm scripts, showing a defined build process, but no security-scanning tools were detected.

Workflow auditcaution

All four workflows were analyzed with no untrusted checkouts or script injection, and no workflow grants top-level write access. However, all 21 action references are unpinned and a high-confidence low-severity finding reports an ad hoc package installation, which weakens CI reproducibility.