upper-case-first

Registry deprecationdanger

The entire package is deprecated, with npm directing consumers to inline string manipulation instead; this is a substantial adoption and maintenance risk even though the release itself is stable.

Release historycaution

The package has existed since 2014 but has had no releases in the last 12 months, indicating a mature but inactive release line.

Repo commit activitycaution

The linked repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance.

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package, creating uncertainty about package-to-repository alignment; the monorepo structure partly explains the mismatch but not the missing mention.

Workflow auditcaution

All three analyzed GitHub Actions references are unpinned, reducing build reproducibility, although the audit found no dangerous triggers, sinks, or security findings.