@open-draft/until

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating a recent pause in development despite the recent repository push.

Security policycaution

The repository has no security policy. This is a transparency gap, although the package's small, dependency-free implementation limits the practical impact.

Workflow auditcaution

The workflow audit found high-confidence use-trusted-publishing, and all three action references are unpinned; the top-level write permission is also broader than necessary, though no untrusted checkout or script injection was found.