ts-dedent

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Recent releases and the recent push partly offset this, but the short-term development pause remains a maintenance concern.

Repo toolingcaution

TypeScript and npm build tooling are present, but no security-scanning tooling was detected. The missing scanning is a modest transparency gap rather than evidence of abandonment.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed without failures, and no untrusted checkout or script-injection issues were found. However, all 22 action references are unpinned, and the release workflow installs a package outside a lockfile; these are workflow hygiene risks.