detab

Release historycaution

The package has existed since 2015 and has 11 releases, but its latest release was nearly four years ago and it had no releases in the last 12 months. That indicates substantially slowed maintenance for a dependency, though the package may be mature and stable.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months, reinforcing the concern that maintenance has stopped or become very infrequent.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security scanning tools were detected. That is a transparency gap, though it is less significant for this small dependency with no runtime dependencies.

Security policycaution

No security policy was found in the repository, leaving vulnerability-reporting expectations undocumented. This is a modest hygiene gap rather than evidence that the package is unsafe.

Token permissionscaution

The repository workflow has no top-level token permissions declaration, so its GitHub Actions permissions are less explicit than recommended. No write permissions or other dangerous workflow behavior were observed.