meros

Maintainerscaution

Only one registry account has publish access, leaving limited publishing redundancy; the linked repository is user-owned, so organization backing does not compensate for that thin base.

Release historycaution

The package has 31 releases since July 2020, but none in the last 12 months; that long recent pause raises maintenance risk despite the established history.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, a meaningful sign of slowing maintenance for a library consumers may depend on.

Repo toolingcaution

The project uses TypeScript and npm scripts, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injections, or audit findings. However, all three action references are unpinned, which weakens build reproducibility.