@pkgr/utils

Release historycaution

The package is mature, with 48 releases over about 7 years, but only one release in the last 12 months despite a historical median interval of about 11 days. The latest release is recent, so this indicates slowing activity rather than abandonment.

Repo bus factorcaution

All three recent commits came from one contributor, giving the project a complete short-term concentration of maintenance. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded only three commits in the last three months, indicating limited recent development activity. This is a maintenance concern, though the repository was recently updated and the package has a current release.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention @pkgr/utils. Although a name mismatch can be normal in a monorepo, the lack of a package mention leaves some uncertainty that this repository directly backs the release.

Workflow auditcaution

All five workflows were analyzed successfully; all 15 action references are pinned, with no untrusted checkout or script-injection findings. The audit still reports high-confidence adhoc package installation and a trusted-publishing finding, so workflow hygiene is not perfect.