original

Release historycaution

The package has had no release in more than 8 years, with zero releases in the last 12 months. Its 12 historical releases show an established package, but the prolonged release gap lowers maintenance confidence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months. This is consistent with the long release gap and materially increases the risk that issues will remain unattended.

Repo toolingcaution

The repository has no build tool or security scanning tool. For this small JavaScript package the build gap is limited, but the absence of security scanning is a modest hygiene weakness.

Security policycaution

No security policy is present. This reduces transparency for reporting vulnerabilities, though the package's small scope and single runtime dependency limit the severity of the gap.

Workflow auditcaution

The sole workflow was fully analyzed with no audit findings or untrusted execution sinks, but all 3 action references are unpinned, leaving avoidable maintenance and action-integrity risk.