alien-signals

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Despite the recent release history, this is a meaningful warning about current maintenance momentum.

Repo toolingcaution

The project uses TypeScript, npm scripts, and Rolldown for builds, showing established build tooling. No security scanning tools are configured, leaving a modest security-hygiene gap.

Security policycaution

The repository has no security policy. This limits disclosure guidance and transparency for security issues, though it is a hygiene concern rather than evidence of abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, injection findings, or high-severity issues. However, all 3 action references are unpinned, creating a supply-chain hygiene weakness.