confusing-browser-globals

Release historycaution

The package has 45 releases but none in the last 12 months; its latest release was over four years ago, indicating meaningful abandonment risk despite its historically regular cadence.

Repo commit activitycaution

The linked repository recorded 0 commits and 0 active maintainers in the last three months, weakening evidence of current maintenance.

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package, so the linkage is not clearly established; monorepo subpackages can explain a name mismatch, but the missing README mention remains cautionary.

Workflow auditcaution

All 8 action references are unpinned, and the audit found a high-confidence template-injection issue plus a package installed outside a lockfile. The workflows have no untrusted checkout or script-injection trigger, which limits the impact but does not remove the hygiene concern.