@sqltools/formatter

Release historycaution

The package has published no releases in the last 12 months, and its latest release was nearly four years ago. Recent repository activity partly offsets abandonment concerns but does not show that this package itself is receiving releases.

Repo toolingcaution

The project uses TypeScript and npm scripts, but no security scanning tools were detected. This is a modest transparency and hygiene gap rather than a standalone adoption blocker.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All three workflows were analyzed without untrusted triggers or script-injection sinks, but 10 of 11 action references are unpinned and a high-severity, low-confidence cache finding plus a high-confidence adhoc package installation reduce workflow hygiene.