is-fullwidth-code-point

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so publication origin is not independently documented; this is a transparency weakness rather than evidence that the release is unsafe.

Release historycaution

This is a mature package released over roughly 11 years with six releases, and its latest release was about 1 year ago. Zero releases in the last 12 months indicates a slow cadence, but that is compatible with a small stable utility.

Repo commit activitycaution

There were no commits or active maintainers in the last 3 months, which shows currently quiet maintenance; the recent release and long-standing package history partly offset this for a narrowly scoped utility.

Repo toolingcaution

No build tools or security scanning tools were detected. The package is small and its release artifact is straightforward, but the absence of automated security tooling reduces transparency.

Token permissionscaution

The only workflow does not declare top-level token permissions, leaving its default permission scope less explicit than ideal.