@mapbox/tiny-sdf

Repo commit activitycaution

The repository records 0 commits and 0 active maintainers in the last 3 months. This is a maintenance caution, although the release history and current push provide some compensating evidence.

Repo toolingcaution

No build tool or security scanning tool was detected. For this small JavaScript package this is a modest transparency and hygiene gap, not evidence of abandonment by itself.

Workflow auditcaution

Both workflows were analyzed with no untrusted checkout or script-injection paths. All 4 action references are unpinned, and a low-confidence cache-poisoning finding was reported in the release workflow; these are workflow hygiene concerns rather than a severe risk on their own.