unicode-canonical-property-names-ecmascript

Release historycaution

The package is mature at 3463 days old with eight releases and one release in the last 12 months; its latest release is recent, though the overall cadence is sparse.

Repo commit activitycaution

There were zero commits and zero active maintainers in the prior three months, a maintenance concern, although the repository was pushed recently for this release.

Workflow auditcaution

The only workflow was fully analyzed and scopes permissions at job level, with no untrusted checkout or script-injection path. Both action references are unpinned; the reported cache-poisoning finding has low confidence and is hygiene rather than a standalone risk.