char-regex

Release historycaution

The package has six releases over about six years, but none in the last 12 months and the latest release was about 22 months ago. This indicates a small, mature package with currently inactive release activity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with roughly 22 months since the last push and raising abandonment risk.

Repo toolingcaution

No build tool or security scanning tool is reported. For this small package the build gap is limited, but the absence of security scanning is a modest transparency weakness.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The only workflow was fully audited with no injection or high-severity findings, but both of its two action references are unpinned. The workflow has no top-level permissions block, which is acceptable on its own.