require-in-the-middle

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating limited recent development activity. The recent release and organization backing partly offset this, but the low activity remains a maintenance caution.

Repo toolingcaution

The repository uses make, Babel, and TypeScript, showing established build tooling, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than evidence of abandonment.

Workflow auditcaution

Both workflows were analyzed without audit findings or untrusted checkouts, but all five action references are unpinned and one workflow has top-level write permissions. These are workflow hygiene and token-scope concerns, not severe risks on their own.