esast-util-from-js

Release historycaution

The latest release was nearly three years ago, with no releases in the last 12 months; this is the main maintenance concern, though the package has six releases and a moderate historical cadence.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, consistent with the nearly three-year-old latest release and indicating limited current maintenance.

Workflow auditcaution

Both workflows were analyzed successfully with no reported audit findings, and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, all four action references are unpinned, creating a reproducibility and action-update risk.