boundary

Release historycaution

The package has only three releases and no release in the last 12 months; its latest release was published in January 2023, which raises maintenance and freshness concerns.

Repo commit activitycaution

There were no commits or active maintainers in the measured three-month period, a maintenance warning that is partly offset by the repository's recent push date and organization backing.

Repo toolingcaution

The repository uses TypeScript and npm scripts for builds, but no security scanning tools were detected; this is a modest transparency and hygiene gap.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injection findings, or elevated top-level permissions. Both of its two action references are unpinned, which weakens reproducibility but is not a severe workflow risk by itself.