has-symbols

Dangerous workflowscaution

Two of 14 workflows use pull_request_target, creating elevated workflow-risk patterns, but none use untrusted checkouts or detected script injection. The risk is limited rather than severe.

Lifecycle scriptscaution

The package uses prepack and prepublish lifecycle scripts, which add install or publication complexity and therefore require some caution, although the package has no runtime dependencies and its repository includes build tooling.

Release historycaution

The package has existed for about 10 years but only 5 releases, with no release in the last 12 months and a typical interval of about 738 days. That is slow maintenance, though the package is mature and narrowly scoped.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, indicating a thin current maintenance signal. The unarchived repository and recent push provide some compensation, but not evidence of active development.

Repo issue activitycaution

Only 1 issue and 1 pull request are open, with no new or closed items in the last month. This shows little current activity but does not by itself indicate abandonment for a mature small utility.