scule

Release historycaution

The package has 13 releases over more than five years, but none in the last two years and seven months. That weakens confidence in ongoing maintenance despite its earlier release cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This is a meaningful maintenance concern, although the repository's recent push and open pull requests provide some evidence of continued project activity.

Repo toolingcaution

The repository uses TypeScript, unbuild, and npm scripts, showing a defined build process. No security scanning tools are present, which is a minor transparency gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy. For a small utility library this is a modest process gap, but it leaves vulnerability reporting expectations unspecified.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, sinks, or audit findings, and one workflow uses read-only permissions. However, five of six action references are unpinned, leaving avoidable build-integrity exposure.