nofilter

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, which weakens current maintenance evidence despite the recent release history.

Repo toolingcaution

The project uses TypeScript and npm scripts, but no security scanning tools were detected. This is a modest transparency and hygiene gap, not evidence of abandonment.

Security policycaution

No security policy was found in the repository. This reduces vulnerability-reporting transparency, though the package otherwise shows active release and project documentation.

Workflow auditcaution

Both workflows were analyzed without high- or medium-severity findings, and one scopes permissions at job level. However, both of the two action references are unpinned, leaving a supply-chain hygiene gap.