assertion-error

Release historycaution

The package is mature, but it has had no release in more than two years and only seven releases overall, indicating a slow maintenance cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the measured three-month period, leaving current maintenance capacity uncertain.

Repo toolingcaution

The repository uses npm scripts for builds, but no security scanning tools were detected; this is a modest transparency and hygiene gap.

Security policycaution

No repository security policy was found, reducing disclosure transparency, though this alone does not indicate that the package is unsafe to depend on.

Workflow auditcaution

Both workflows were analyzed with no untrusted checkout, script injection, or unpinned action findings. The high-confidence use-trusted-publishing finding is a workflow hygiene concern, while the low-confidence cache-poisoning finding is not independently decisive.