is-string

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less verifiable even though other repository evidence is available.

Release historycaution

The package has existed since January 2015 with a stable release history, but it has had no release in the last 12 months; the latest release was about 21 months ago.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, indicating currently quiet maintenance despite its recent historical push.

Workflow auditcaution

All six workflows were analyzed successfully with no audit findings, no untrusted checkouts, and no script injection. However, all six action references are unpinned, so builds remain exposed to reference changes.