domelementtype

Lifecycle scriptscaution

A prepare install-time script adds execution during installation, which is an avoidable supply-chain and reproducibility concern despite the otherwise small package.

Maintainerscaution

Only one registry account has publish access, leaving little publishing redundancy; the repository also identifies an individual owner rather than an organization.

Repo commit activitycaution

No commits or active maintainers were recorded in the last 3 months, a meaningful maintenance concern for a package whose latest release is a breaking ESM transition.

Workflow auditcaution

Eight of ten action references are unpinned, and the audit found a high-confidence bot-condition issue; the low-confidence cache-poisoning finding is only a minor hygiene concern.