@vue/eslint-config-prettier

Release historycaution

The package has 63 releases over roughly 8 years, but no releases in the last 12 months; the long pause lowers confidence in active maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months, a meaningful sign of currently limited development activity.

Repo toolingcaution

The repository uses TypeScript build tooling, but no security scanning tools were detected; this is a modest transparency and maintenance gap.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations undocumented.

Workflow auditcaution

All workflows were analyzed and use job-level permissions, with no untrusted checkout or script-injection findings. However, all 3 action references are unpinned; the low-confidence cache-poisoning finding is hygiene rather than a standalone severe risk.