@isaacs/balanced-match

Lifecycle scriptscaution

A prepare script runs during package lifecycle operations, adding install-time behavior that deserves review even though no harmful behavior is shown here.

Release historycaution

Only two releases occurred, both within about two hours, and there were no releases in the last 12 months. This is a maintenance caution, though the repository was pushed more recently.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, indicating a quiet maintenance period. The recent repository push provides some compensating evidence but does not remove the caution.

Repo toolingcaution

The project uses TypeScript build tooling. No security scanning tool was detected, which is a minor hygiene gap rather than a standalone dependency risk.

Workflow auditcaution

The workflow audit completed fully, found no high- or medium-severity findings, and confirmed read-only permissions. Both analyzed action references are unpinned, a supply-chain hygiene caution.