text-decoder

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning, although the release history and recent push provide some compensating evidence.

Repo toolingcaution

No build tooling or security scanning tools were detected. For this small package the build gap is limited, but the absence of automated security scanning reduces maintenance transparency.

Security policycaution

The repository has no security policy. This weakens disclosure transparency, though it is not by itself evidence that the package is unsafe.

Type declarationscaution

No type declarations are included. This is a minor integration cost for a JavaScript library, but it does not by itself indicate abandonment or unsafe maintenance.

Workflow auditcaution

The single workflow was fully analyzed and uses read-only permissions, with no audit findings or untrusted checkouts. However, both action references are unpinned, leaving a workflow reproducibility and action-integrity gap.