adversarial-review

This release appears suitable for dependency use, with strong evidence of active maintenance, rapid release activity, stable major-version status, a non-archived matching repository, npm provenance, and no install-time lifecycle scripts. The main concerns are that the project is young, nearly all recent commits come from one contributor, repository security scanning is absent, one workflow has top-level write permissions, and no security policy is published. Missing package tests, changelog, and type declarations are less significant here because the repository contains tests and a changelog and the package is primarily a command-line tool. Overall, it is usable but merits normal review of its workflow and release controls before adopting it in a high-trust build.

Latest 2.11.0NPM

Maintainers

voodootikigod