data-urls

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, which is a meaningful maintenance concern. The current release, today's repository push, and two merged pull requests partly offset that quiet period.

Repo toolingcaution

The repository reports no build tool and no security-scanning tool. For this compact package the lack of a build system is unsurprising, but the absence of security scanning is a modest hygiene gap.

Type declarationscaution

No type declarations are shipped, which reduces convenience for TypeScript consumers of this library. This is a consumer-ergonomics gap rather than evidence of abandonment.

Workflow auditcaution

Both workflows were analyzed without failures and no untrusted checkout or script-injection paths were found. However, all 4 action references are unpinned and one workflow has top-level write permissions; the low-confidence cache-poisoning finding is hygiene only.