is-symbol

Lifecycle scriptscaution

The package declares prepack and prepublish lifecycle scripts. These are not inherently unsafe, but they add build-time execution that merits some caution when installing from source or rebuilding.

Release historycaution

The package has existed since January 2015 with seven releases, but it has had no release in the last 12 months and its median release interval is about 16 months, indicating a slow cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a maintenance warning, although the recent push date and long project history provide some compensation.

Workflow auditcaution

All six workflows were analyzed with no audit findings, no untrusted checkouts, and no script injection. However, all six action references are unpinned, creating a reproducibility and action-tampering hygiene gap.