reduce-css-calc

Release historydanger

The package has 31 releases but none in the last 12 months, with the latest registry release on January 8, 2021. This long release gap materially raises maintenance and abandonment risk.

Lifecycle scriptscaution

A prepublish lifecycle script runs during publishing, adding some release-process complexity and supply-chain exposure, though this is less concerning than an install-time script.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, so there is no evidence of current development activity to offset the old registry release.

Security policycaution

The repository has no security policy, which limits disclosure guidance for a package that may still be used in production. Its documented source and tests provide some transparency but do not replace that process.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous sinks or audit findings, but all 3 action references are unpinned, leaving builds exposed to upstream action changes.