lower-case-first

Registry deprecationdanger

The package is deprecated at package scope, and npm explicitly recommends a direct replacement expression. This withdraws confidence from adopting the release despite other healthy project evidence.

Release historycaution

The latest registry release was nearly three years ago, with no releases in the last 12 months. That weakens confidence that this release remains actively supported.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. A recent repository push provides some evidence of upkeep, but not sustained recent development.

Repo package mentioncaution

The linked repository neither matches the package name nor mentions it in the README, creating uncertainty about the package-to-repository relationship. Its monorepo-like contents partly explain the mismatch but do not remove it.

Workflow auditcaution

The sole workflow was fully analyzed with no reported findings or untrusted triggers, but all three action references are unpinned. That is a workflow reproducibility concern rather than a severe risk.