named-placeholders

Repo commit activitycaution

There were no commits from active maintainers in the last three months, which indicates limited recent development activity. Recent release and pull-request signals partly offset this, so the concern is moderate rather than severe.

Type declarationscaution

No type declarations are published, which makes integration less convenient for TypeScript consumers. The package is a small JavaScript query utility, so this is a minor ergonomics gap rather than a maintenance risk.

Workflow auditcaution

All four workflows were analyzed with no audit findings, and no untrusted checkout or script-injection paths were detected. However, all 11 analyzed action references are unpinned and one workflow has top-level write permissions, creating a workflow hygiene caution.