@ethersproject/strings

Release historycaution

The package has 43 releases since March 2019, but no releases in the last 12 months and the latest release was over 18 months ago. This suggests slowing package-level maintenance, despite the established history.

Repo bus factorcaution

All 8 recent commits came from one contributor, creating a concentration risk. Organization ownership provides some handoff capacity, but no second recent contributor is shown.

Repo package mentioncaution

The linked repository neither matches the package name nor mentions it in its README, so the package-to-repository relationship is less explicit than ideal. The organization-backed monorepo context makes a name mismatch understandable but does not remove the transparency gap.

Workflow auditcaution

All 21 analyzed action references are unpinned, which weakens build reproducibility, and a high-confidence low-severity finding shows a workflow installing a package outside a lockfile. No untrusted checkout or script-injection paths were found.