string.prototype.codepointat

Release historycaution

The package is mature at about 13 years old, but it has only six releases and one release in the last 12 months, with a median interval of about 794 days. The recent release shows the project is not abandoned, but cadence is slow.

Repo bus factorcaution

One contributor made all six recent commits, creating a meaningful single-maintainer continuity risk. The repository is current, but no second recent contributor provides resilience.

Repo toolingcaution

The repository reports no build tool and no security scanning, leaving limited automated assurance beyond its tests and workflow audit.

Workflow auditcaution

All seven workflows were analyzed, but all eight action references are unpinned and one workflow has top-level write permissions. The high-severity cache finding has low confidence, while trusted publishing was reported with high confidence, so workflow hygiene warrants caution rather than a severe verdict.