deps-regex

Release historycaution

The latest release was nearly five years ago, and there were no releases in the last 12 months. This is a meaningful freshness and abandonment concern, although the package remains published and is not deprecated.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months, consistent with the long release gap. The repository is not archived, which provides limited compensation but does not show active maintenance.

Security policycaution

No repository security policy was found. For this small, dependency-free package the gap is limited, but it reduces transparency for reporting and handling security issues.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but both of its two action references are unpinned. That leaves avoidable build-integrity exposure.