set-function-length

Project backingcaution

The repository is owned by an individual rather than an organization, so the single registry maintainer does not show broader organizational backing; the repository itself is still directly matched to the package.

Release historycaution

The latest release was over two years ago, with no releases in the last 12 months; the seven-release history shows an established package but suggests maintenance has slowed.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, reinforcing the concern raised by the long release gap.

Workflow auditcaution

All five workflows were analyzed with no audit findings and four use read-only permissions, but all five action references are unpinned; the two pull_request_target workflows had no untrusted checkout or script-injection sinks.