@peculiar/utils

Repo bus factorcaution

Two contributors were active, but the top contributor made 20 of 22 commits, or about 91%. The organization-backed project and a second active contributor partly compensate, so this is a meaningful maintenance caution rather than a severe abandonment signal.

Repo toolingcaution

The repository uses TypeScript, Vitest, and npm build tooling, supporting a reproducible development structure. No security scanning tool was detected, leaving a modest security-process gap.

Security policycaution

The repository has no published security policy. This reduces transparency about vulnerability reporting and handling, though it does not by itself indicate unsafe code.

Workflow auditcaution

Both workflows were analyzed successfully with no untrusted checkouts, script injection, or audit findings, and one workflow uses read-only permissions. However, five of six action references are unpinned, which is a workflow reproducibility and update-integrity caution.