@lit/context

Release historycaution

The package has had no registry release in the last 12 months, which raises a maintenance concern. The linked repository was pushed recently and shows ongoing activity, partly offsetting the release gap.

Repo toolingcaution

The repository uses established build tooling including Rollup and TypeScript. Security scanning tooling was not detected, which is a minor transparency gap but not decisive here.

Workflow auditcaution

All nine workflows use read-only permissions and the audit found no high- or medium-severity findings, with no untrusted checkouts or script injection. However, all 33 analyzed action references are unpinned, leaving avoidable supply-chain maintenance risk.