dequal

Release historycaution

The package has seven releases but none in the last 12 months, and version 2.0.3 was published over four years ago. Its established history helps, but the long release gap is a maintenance concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The repository is not archived, but there is no recent development evidence to offset the inactivity.

Security policycaution

No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented. Other repository evidence shows the project is real and identifiable, but does not replace that policy.

Workflow auditcaution

The workflow has no untrusted checkout or script-injection path, but both action references are unpinned and the audit identified high-confidence adhoc package installation; the low-confidence cache finding is only a hygiene concern.