string.prototype.trimstart

Lifecycle scriptscaution

The package uses prepack and prepublish lifecycle scripts. These are relevant supply-chain execution points, but the signal does not show suspicious behavior or an install-time script.

Release historycaution

The package has 11 releases since December 2017, but its latest registry release was in March 2024 and there were none in the last 12 months. The linked repository was pushed in January 2026, partly compensating for the stale registry cadence.

Repo commit activitycaution

There were no commits or active maintainers in the three months measured, which indicates currently low development activity. The January 2026 push and the package's mature, narrow scope reduce but do not remove abandonment concern.

Workflow auditcaution

All five workflows were analyzed successfully with no audit findings, and the pull_request_target triggers have no untrusted checkout or script-injection sinks. However, all five action references are unpinned, leaving a minor build-integrity weakness.