@hapi/validate

Package scaffoldingcaution

The published README explicitly says this fork is maintained only for hapi core modules and recommends the official joi library for other uses, which materially limits its suitability as a general dependency. Repository tests provide some compensating evidence.

Release historycaution

The package has had seven releases since July 2020 but none in the last 12 months; its latest release was in February 2023. This indicates a long period without registry maintenance, though the linked repository was pushed later.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the evidence of a currently inactive release line. The repository is not archived, which provides only limited compensation.

Workflow auditcaution

The single analyzed workflow has no untrusted checkout or script-injection findings and no top-level write permissions, but its one action reference is unpinned. That is a minor build reproducibility and supply-chain hygiene gap.