is-expression

Release historydanger

The package has had no release in more than six years, with zero releases in the last 12 months; this is substantial abandonment risk for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, although its later push history shows the project is not necessarily abandoned outright.

Workflow auditcaution

All three workflows were analyzed with no audit findings and no untrusted checkout or script-injection sinks. However, all eight action references are unpinned, leaving a workflow reproducibility and action-update hygiene gap.