respect/string-formatter

Name lookalikedanger

The package strongly resembles Respect/Stringifier, has 0.0 artifact overlap, but explicitly borrows the lookalike's identity and is not described as a fork. Consumers most likely wanted the much more established Respect/Stringifier package.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, while the latest push was about seven months ago. The earlier burst of releases does not compensate for this current inactivity.

Security policycaution

The linked repository has no security policy. This is a transparency gap for a library, although the clear ownership, license, and repository documentation provide some context.

Workflow auditcaution

All 3 workflows were fully analyzed with no dangerous sinks or audit findings, but all 11 action references are unpinned. The absence of top-level permissions is acceptable here, though unpinned actions weaken build reproducibility.