matchmediaquery

Release historycaution

No registry release has appeared for about 3 years, while the package has only five releases overall; this raises maintenance concern, though recent repository commits partly compensate.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations unclear; this is a transparency gap, not evidence of an unsafe release.

Type declarationscaution

The package has no type declarations, which makes integration less convenient for TypeScript consumers; no provided signal shows that this gap is expected for this library.

Workflow auditcaution

All four analyzed action references are unpinned, and the audit reports high-confidence use of trusted publishing; the low-confidence cache-poisoning finding is only a hygiene concern.