array.prototype.findlast

Release historycaution

The package has had no release in roughly two years and none in the last 12 months, which lowers confidence in ongoing maintenance despite nine releases since 2021.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the maintenance slowdown shown by the release history.

Repo toolingcaution

No build tools or security scanning tools were detected, leaving limited evidence of automated security and build safeguards, although the small JavaScript shim has a straightforward package tree.

Workflow auditcaution

All five analyzed action references are unpinned, creating avoidable workflow reproducibility and action-change risk. The pull_request_target triggers have no untrusted checkout or script-injection sinks, so this is a hygiene concern rather than a severe workflow risk.