eslint-flat-config-utils

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern despite the recent release history.

Repo toolingcaution

The project uses established TypeScript and build tooling, but no security scanning tools were detected, leaving a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy. This is a minor transparency gap for a small utility package, not evidence that the release is unsafe by itself.

Workflow auditcaution

Both workflows were analyzed completely with no untrusted checkouts or script injection, and one scopes permissions at job level. However, all 10 action references are unpinned and the CI workflow has three high-confidence adhoc-package findings, weakening build reproducibility.