@dxup/unimport

Project backingcaution

The repository is owned by an individual rather than an organization, so the concentrated contributor activity is not offset by visible organizational maintenance backing.

Release historycaution

The package has four releases over about one year, but its latest registry release was about 10 months before collection despite recent repository activity, indicating a slower release cadence.

Repo bus factorcaution

Five contributors were active, but the top contributor made about 77% of recent commits. The active secondary contributors partly offset this concentration, but it remains a maintenance-resilience concern.

Repo toolingcaution

The project uses TypeScript, Vitest, and npm scripts, but no security scanning tooling was detected, leaving a modest security-hygiene gap.

Security policycaution

The repository has no security policy, which reduces transparency about vulnerability reporting and response expectations.