@petamoriken/float16

IEEE 754 half-precision floating-point for JavaScript

Latest 3.9.3

70%

Total Score

caution

Usable with caveats: unpinned workflows and high-confidence automation findings weaken otherwise strong maintenance evidence.

Health Score Breakdown

Project backing

The registry namespace and repository are owned by the same individual account, so the package has direct ownership alignment but no organizational backing.

Repo commit activity

No commits or active maintainers were recorded in the last three months, which is a maintenance concern, though recent repository pushes and substantial pull-request merges provide some compensating evidence.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations undocumented; this is a modest transparency gap for an otherwise maintained project.

Workflow audit

All 30 analyzed action references are unpinned, and a high-confidence bot-condition finding plus high-confidence ad hoc package installation weaken workflow hygiene. The low-confidence cache-poisoning finding is only a minor additional concern; no untrusted checkout or script-injection paths were found.