ylru

Release historycaution

The package has existed since December 2016 with 10 releases, but its latest release was over two years ago and there were no releases in the last 12 months. This indicates a mature but currently inactive project.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last release being over two years ago. This raises the risk that fixes or updates may not arrive promptly.

Repo toolingcaution

The repository uses TypeScript, but no security-scanning tools were detected. This is a modest transparency and hygiene gap rather than evidence of unsafe code.

Security policycaution

No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both analyzed workflows use unpinned action references, so their external actions are not fixed to immutable versions. The audit found no untrusted checkouts, script injection, excessive permissions, or other substantive findings.