eslint-utils

Name lookalikedanger

The package is flagged as borrowing the identity of eslint-scope, which has far more downloads; this is strong evidence that consumers could choose the wrong package even though artifact overlap is 0.0.

Maintainerscaution

Only one registry account has publish access. The linked repository is user-owned rather than organization-backed, so this leaves a thin observable maintainer base.

Release historycaution

The package has 13 releases but none in the last 12 months; its latest release was over five years ago, which materially raises abandonment and compatibility risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance activity.

Workflow auditcaution

The single workflow was fully audited with no untrusted checkout or script-injection findings; all four action references are unpinned and it installs a package outside a lockfile, creating modest hygiene concerns.