unist-util-position-from-estree

Release historycaution

The latest release was in July 2023, with no releases in the following three years. This suggests a mature or inactive package, but the low release count limits evidence of ongoing maintenance.

Repo commit activitycaution

The repository recorded no commits and had no active maintainers in the last three months. For a small utility this may reflect stability, but it reduces evidence that issues or compatibility changes will be addressed.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, showing a defined build process. No security scanning tooling is reported, which is a minor transparency gap for a small stable package.

Workflow auditcaution

Both workflows were analyzed without audit findings, and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, all four action references are unpinned, reducing build reproducibility.