@modern-js/utils

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package, so the package-to-repository relationship is less explicit than ideal; the organization-backed monorepo context partly reduces that concern.

Repo toolingcaution

The project uses established build tooling, but no security scanning tools were detected. The active repository and workflow audit partly compensate for this, so this is not a major health concern.

Security policycaution

No repository security policy was detected, leaving vulnerability-reporting guidance less transparent than ideal.

Version stabilitycaution

Version 3.10.0 is a stable major release and is not a prerelease. The recent prerelease share is high at 95%, which adds some release-channel complexity but does not make this release unstable on its own.

Workflow auditcaution

All 10 workflows were analyzed with no unpinned action references, untrusted checkouts, script injection, or write-all token permissions. Six high-confidence low-severity findings install packages outside a lockfile, creating a minor reproducibility and supply-chain hygiene concern.