h4kuna/number-format

Release historycaution

The package has 39 releases since 2012, but none in the last 12 months and the latest registry release was on April 30, 2024. This is a meaningful maintenance concern for a dependency, despite its long release history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. A push in February 2025 shows the repository is not archived, but current development activity is still absent.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though the package has a matching repository and active build workflows.

Workflow auditcaution

All 9 of 9 analyzed action references are unpinned, which weakens build reproducibility. The audit found no dangerous triggers, untrusted checkouts, script injection, or other reported findings, and missing top-level permissions blocks are acceptable on their own.