@datadog/native-iast-rewriter

Registry deprecationdanger

The entire package is marked deprecated with the message “Package no longer supported” and has no replacement listed. This directly undermines confidence in taking a new dependency on this release.

Lifecycle scriptscaution

The package runs a prepare script during installation. This can be normal for build preparation, but it adds installation behavior that deserves more trust than a package without lifecycle scripts.

Release historycaution

The package has 32 releases over about 4 years, but none in the last 12 months and the latest registry release was about 20 months ago. Recent repository activity partly offsets the stale registry cadence, but not the release gap.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the linkage is not clearly demonstrated. Organization backing reduces but does not remove this transparency concern.

Security policycaution

No repository security policy was found. This is a transparency gap for reporting vulnerabilities, though it is less serious than the package-level deprecation.