rgb-regex

Release historydanger

The package has had only two releases, both in February 2015, with no release in more than 11 years. This is strong evidence of stagnation, although the small, stable scope may require few changes.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with a repository that has been inactive for about eight years. This materially raises abandonment risk.

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so publication cannot be independently tied to a verified build. This is a transparency weakness, but not decisive for this simple package.

Repo issue activitycaution

There has been no issue or pull-request activity in the last month, while one issue and one pull request remain open. This suggests little evidence of active maintenance.

Repo toolingcaution

The repository reports no build tools and no security scanning tools. For a tiny dependency-free JavaScript package this is a modest hygiene gap, not a severe risk.