@ethersproject/pbkdf2

Release historycaution

The package has 39 releases over roughly 7.5 years, but none in the last 12 months; the latest release was about 19 months ago. The documented security update for version 5.8.0 partly offsets the age, but the current cadence still raises maintenance concerns.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although a recent push is recorded elsewhere, the measured commit window indicates weak current development activity.

Repo issue activitycaution

The repository still received six new pull requests in the last month, but it closed only one issue and merged no pull requests. This is mixed evidence rather than a strong maintenance signal.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @ethersproject/pbkdf2. This is a caution because the linkage is not explicit, although the package is plausibly a monorepo sub-package.

Workflow auditcaution

All four workflows were analyzed with no untrusted checkouts, script injection, or high- or medium-severity findings. However, all 21 action references are unpinned, and one workflow installs a package outside a lockfile, creating a real but limited reproducibility and workflow-hygiene concern.