linebreak

Release historycaution

The package has nine releases over nearly 13 years, but none in over four years; this is a meaningful sign of slow release maintenance for a dependency.

Repo commit activitycaution

There were no commits from any active maintainer in the last three months, which indicates currently limited development activity even though the repository is not archived.

Repo toolingcaution

The project uses Parcel and npm scripts, but no security scanning tools were detected; this is a transparency and maintenance gap rather than a severe defect.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The sole workflow was fully analyzed with no audit findings or untrusted checkouts, but both action references are unpinned, weakening build reproducibility.