@ianvs/prettier-plugin-sort-imports

Build provenancecaution

This release has no build attestation or trusted-publisher provenance, so registry artifacts cannot be independently tied to a verified publishing workflow.

Release historycaution

The package is mature, with 43 releases over about four and a half years, but only one release in the last 12 months suggests a slower maintenance pace.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, which is a meaningful maintenance warning despite the recent release.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

Both workflows were fully analyzed with no detected dangerous sinks or audit findings, but all 7 action references are unpinned, leaving the build exposed to moving action revisions.