es-define-property

Dangerous workflowscaution

Two of six workflows use pull_request_target, which warrants review because that trigger can expose elevated repository context to pull requests. No untrusted checkouts or script-injection patterns were detected, limiting the concern.

Project backingcaution

The repository is owned by a named individual rather than an organization, so the single-maintainer publishing model represents a real bus-factor limitation.

Release historycaution

There have been only 2 releases, and no releases in the last 12 months; the latest release was about 1 year and 9 months ago. The low cadence is a maintenance concern, though a tiny stable utility may need few updates.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long gap since the latest release. This raises abandonment risk despite the package's narrow, stable scope.

Repo issue activitycaution

There is only one open issue and no issue or pull-request activity in the last month. This is limited evidence of current community activity, but not a severe concern for a small utility.