ethereumjs-util

Release historycaution

The package has 85 releases and a historically regular median interval of about 10 days, but none in the last four years; that long release gap is a meaningful maintenance concern for this release.

Repo package mentioncaution

The repository name does not match the package and its README does not mention ethereumjs-util, so the package-to-repository link is less transparent; the monorepo structure makes a name mismatch ordinary but does not remove the documentation gap.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting and response expectations less transparent.

Workflow auditcaution

All 27 workflows were analyzed with no untrusted checkout or script-injection findings, but 90 of 96 action references are unpinned and high-confidence secrets-inherit findings widen credential access; low-confidence cache findings are only hygiene concerns.