deep-eql

Release historycaution

The package is mature, with 23 releases over about 13 years, but it has had no registry release in the last 12 months; recent repository activity partly compensates for the slower publishing cadence.

Repo toolingcaution

The repository uses a build tool, but no security scanning tools were detected. This is a transparency gap, though the clean workflow-risk results and small dependency surface reduce its practical impact.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Token permissionscaution

Neither workflow declares top-level token permissions. Although no workflow requests top-level write access, the missing explicit restrictions reduce CI security transparency.