ansi-regex

Repo bus factorcaution

All 3 recent commits came from one contributor, giving the project a concentrated maintenance base. That is a caution, although the organization-owned project can provide some continuity.

Workflow auditcaution

The only workflow was fully analyzed with no injection, untrusted-checkout, or high-severity findings. However, both action references are unpinned, leaving a modest reproducibility and action-supply-chain hygiene gap.