@es-joy/resolve.exports

Release historycaution

There were 3 releases over 330 days, but the latest release was about 11 months ago, indicating a short history followed by a long period without releases.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with roughly 11 months since the last push and raising abandonment concerns.

Repo toolingcaution

The repository uses TypeScript and npm scripts, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

No repository security policy was found, so there is no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed and has no dangerous trigger or untrusted checkout, but both action references are unpinned and it installs a package outside a lockfile; the cache-poisoning finding is low confidence and therefore only hygiene evidence.