regex

Maintainerscaution

Only one registry account has publish access, creating a thin publishing base, although the linked repository is owned by the same individual and matches the package.

Release historycaution

The package is mature at over 13 years old with 29 releases and one release in the last 12 months, but the recent cadence is slower than its historical median of about 4.9 days between releases.

Repo commit activitycaution

There were zero commits and zero active maintainers in the past three months. The recent repository push and a release in the past year provide some counterevidence, but maintenance activity is currently quiet.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities are reported and handled.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers, sinks, or findings, but all three referenced actions are unpinned, leaving avoidable build-integrity risk.