@jsep-plugin/regex

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Recent pull-request activity and a recent repository push partly compensate, but the direct commit record still indicates a maintenance concern.

Repo toolingcaution

The repository uses Rollup and npm scripts, but no security-scanning tools were detected. This is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

No security policy was found in the repository, leaving the process for reporting vulnerabilities unclear.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous audit findings or untrusted checkouts, and neither uses broad top-level write permissions. However, all 8 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.