@ardatan/aggregate-error

Project backingcaution

The package is published under @ardatan while the linked repository is owned by the individual user sindresorhus. This is not inherently unsafe because the repository name matches the package and the README mentions it, but it offers limited organizational backing.

Release historycaution

The latest release was in September 2020, with no releases in the last 12 months and only six releases overall. This is a meaningful maintenance concern, though recent repository activity provides some compensating evidence.

Repo bus factorcaution

All recent commits came from one contributor, leaving maintenance dependent on a single active person and increasing continuity risk.

Version stabilitycaution

Version 0.0.6 is not a prerelease, but it remains below 1.0, so compatibility expectations are less mature than for a stable-major package.

Workflow auditcaution

The workflow audit completed fully with no high- or medium-confidence findings, no untrusted checkouts, and no script injection. However, both action references are unpinned, so their contents can change outside a release review.