eslint-plugin-unused-imports

Project backingcaution

The repository is owned by an individual rather than an organization, so its maintenance capacity depends on a relatively narrow ownership base. Other signals show a real, matching project rather than a detached package.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. The recent release and push provide some compensating evidence, but the current development pause still lowers maintenance confidence.

Repo toolingcaution

The repository uses TypeScript, Vitest, tsup, and npm scripts, showing a structured build and test setup. No security scanning tooling is configured, leaving a modest hygiene gap.

Security policycaution

The repository has no security policy, so vulnerability reporting expectations are not documented. This is a transparency gap, but it does not by itself indicate abandonment.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers, untrusted checkouts, or audit findings, and one scopes permissions at job level. However, all four action references are unpinned, which creates a mild workflow supply-chain hygiene risk.