ignore-by-default

Release historycaution

The package has only four releases over more than ten years, with no release in roughly four years. That unusually slow cadence raises maintenance and abandonment concerns, though a small stable utility may need few releases.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring in May 2022. This is the main evidence of current maintenance risk.

Repo toolingcaution

The repository reports no build tooling or security scanning. For this small JavaScript package that is not severe, but it leaves less evidence of automated maintenance and security hygiene.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but both action references are unpinned. Missing top-level permissions is acceptable on its own; unpinned actions are a modest reproducibility and maintenance concern.