trim-lines

Release historycaution

The package has had no registry release in over four years, after eight releases across roughly 11 years. This is a meaningful maintenance concern, though the stable 3.0.1 release and the package’s tiny scope partly compensate.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating little current maintenance activity.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security scanning tools were detected. The build setup is present, while security-process coverage is limited.

Security policycaution

No repository security policy was found. This reduces transparency about how vulnerabilities are reported and handled, although it does not by itself indicate abandonment.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkout or script-injection findings, but all three action references are unpinned. That is a supply-chain hygiene gap without evidence of an active exploit path.