@pnpm/util.lex-comparator

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, which weakens direct evidence of ongoing maintenance despite the recent release and push.

Security policycaution

No security policy was found, leaving vulnerability-reporting expectations less transparent; organization backing and security scanning partly compensate.

Workflow auditcaution

All 3 analyzed action references are unpinned, and the audit found a high-confidence low-severity adhoc package installation; read-only workflow permissions and no untrusted triggers limit the risk.