@tailwindcss/typography

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating a recent pause in development despite the broader release history.

Repo toolingcaution

The project uses npm build scripts, but no security scanning tools were detected. This is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

Version 0.5.20 is a stable, non-prerelease release, although 80% of recent releases were prereleases, which adds a modest stability concern.

Workflow auditcaution

All seven action references are unpinned, and two low-confidence cache-poisoning patterns were reported; the audit was complete, but release workflow reproducibility and cache hygiene could be stronger.