find-up-simple

Project backingcaution

The repository is owned by an individual rather than an organization, so the one registry maintainer is consistent with the project backing but leaves a limited visible ownership base.

Release historycaution

Only two releases have been published, with no releases in the last 12 months and a median interval of about 484 days. That indicates a quiet cadence, though this can fit a small, stable utility.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. This is the clearest maintenance concern, although the reported recent repository push provides some counterevidence against abandonment.

Repo toolingcaution

The repository reports no build tool and no security-scanning tool. For a tiny zero-runtime-dependency utility this is a modest hygiene gap, not a severe adoption risk.

Workflow auditcaution

The single workflow was fully analyzed with no injection, untrusted-checkout, or high- or medium-severity findings. Both action references are unpinned, which leaves avoidable update and supply-chain ambiguity.