@javascript-obfuscator/estraverse

Name lookalikedanger

The artifact has complete overlap with estraverse, borrows its identity, and identifies itself as that package; estraverse has far more downloads and stable releases. This is strong evidence consumers may have intended the established package instead.

Release historydanger

Only two releases exist, with none in the last 12 months; the latest was published in December 2021, more than four years ago. That makes the package look abandoned rather than actively maintained.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the repository is not archived, current maintenance capacity is not demonstrated.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 27 issues and 12 pull requests remain open. This supports a picture of stalled project activity.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap, though it does not by itself establish a release risk.