polyfills/array-find

Release historycaution

This is the only release, published 841 days ago, with no releases in the last 12 months. That limits evidence of ongoing maintenance, although a narrow polyfill may need few releases.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, indicating no recent development activity. This is the strongest maintenance concern, though the package is a narrow, stable polyfill.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. The build setup is appropriate; the missing scanning is a modest transparency gap.

Security policycaution

No repository security policy was found. This is a transparency gap, though the package is small and has no reported security workflow findings.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or untrusted checkouts, and it avoids top-level write permissions. Both action references are unpinned, which weakens supply-chain reproducibility.