wikimedia/wrappedstring

Name lookalikedanger

The signal reports that wikimedia/wrappedstring borrows the identity of wikimedia/css-sanitizer, which has far more monthly downloads and stable releases. This is strong evidence consumers may have intended the lookalike package, so it is a severe adoption risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the recent push and established release history provide some compensation, this still weakens evidence of active maintenance.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is less serious than an archived or deprecated project.