micromatch

Release historycaution

The package has existed for about 12 years with 69 releases, but its latest release was about two years ago and it had no releases in the last 12 months. This supports maturity while raising a current-maintenance concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the roughly two-year release gap and increasing abandonment risk.

Repo issue activitycaution

Recent issue and pull-request activity is limited but not entirely absent: two issues closed and two pull requests opened in the last month. This partially offsets the lack of commits without demonstrating active maintenance.

Repo toolingcaution

The repository uses a build tool but reports no security-scanning tooling. This is a modest transparency and hygiene gap, not a severe dependency-health concern by itself.

Workflow auditcaution

All workflows were analyzed successfully with no reported audit findings, dangerous untrusted checkouts, or script injection. However, both action references are unpinned, which is a workflow supply-chain hygiene gap.