strip-bom-buf

Maintainerscaution

One registry publishing account is present, and the repository is owned by the same individual. This is a thin maintainer base, but it is consistent with a small personal utility rather than evidence of immediate failure.

Release historycaution

The package has existed since 2016 but has only five releases, with no release in the last 12 months and a latest release nearly three years ago. This suggests limited current maintenance, though the small, focused package may change infrequently.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long release gap and raising abandonment risk.

Workflow auditcaution

The workflow audit completed fully with no injection or high-confidence findings, but both of the two action references are unpinned. That is a modest reproducibility and supply-chain hygiene gap.