es-errors

Dangerous workflowscaution

Two of five workflows use pull_request_target, which can require extra care because it runs with elevated trust boundaries. No untrusted checkouts or script injection patterns were detected, limiting the concern.

Project backingcaution

The repository is backed by an identified individual owner rather than an organization. This is not inherently unhealthy, but it means the small maintainer base offers limited redundancy.

Release historycaution

The latest release was about 2 years and 7 months ago, with no releases in the last 12 months. That lowers confidence in ongoing maintenance, although a small stable utility may not require frequent releases.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and creating a real maintenance concern.

Repo toolingcaution

The repository uses TypeScript build tooling, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than a severe risk for this small package.