properties-reader

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, a concrete sign that maintenance may currently be paused despite the recent release history.

Repo issue activitycaution

There is one open issue and five open pull requests, but none were created or merged in the last month, suggesting limited recent project activity.

Repo toolingcaution

The repository uses TypeScript, tsup, npm scripts, and SWC for its build, but no security-scanning tools were detected. The build setup is healthy, while the missing scanning is a modest transparency gap.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations undocumented. This is a hygiene gap rather than evidence that the package is unsafe.

Token permissionscaution

One workflow has explicit top-level write permissions and another has no top-level permissions declaration, so workflow access controls are not uniformly minimal; one workflow does declare read-only permissions.