estree-util-to-js

Release historycaution

The package has had no releases in over three years, despite five releases since May 2022. This is a meaningful maintenance concern, though the stable 2.0.0 release and release notes provide some transparency.

Repo commit activitycaution

There have been zero commits and zero active maintainers in the last three months, consistent with the broader multi-year release pause. The unarchived state does not compensate for the lack of observed activity.

Repo issue activitycaution

There are no open issues or pull requests and no recent issue or pull request activity. This is compatible with a small stable project, but it provides no evidence of ongoing maintenance.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but reports no security scanning tools. This is a modest hygiene gap rather than a severe dependency risk.

Workflow auditcaution

Both workflows were analyzed successfully and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, all four action references are unpinned, leaving workflow dependencies exposed to upstream changes.