@simple-git/args-pathspec

Package scaffoldingcaution

The published artifact has no README, but the repository has tests and a changelog, and this exact version has GitHub release notes. The missing artifact README is a minor consumer-documentation gap rather than a maintenance risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. That is a meaningful maintenance concern, even though releases and merged pull requests are recent.

Repo package mentioncaution

The repository name does not match this subpackage and its README does not mention the package. The mismatch is plausible for a monorepo, but the lack of a README mention leaves package ownership somewhat less transparent.

Security policycaution

No repository security policy was found. This is a transparency gap, but it is not severe enough on its own to make the release unfit.

Workflow auditcaution

All four workflows were analyzed with no detected dangerous sinks or high-confidence findings, and some workflows use read-only permissions. However, all 12 action references are unpinned and one workflow has top-level write permissions, creating a workflow-hygiene concern.