@mapbox/mapbox-gl-geocoder

Lifecycle scriptscaution

A prepublish lifecycle script is present, adding some build-time complexity, but this alone is not evidence of poor maintenance or unsafe dependency use.

Release historycaution

The package has 41 releases over nearly ten years, but none in the last twelve months despite a historically regular median interval of about 31 days. This is a meaningful sign of slowing maintenance.

Repo bus factorcaution

All recent repository activity comes from one contributor, creating a concentrated maintenance dependency. Organization backing provides some handoff capacity but does not remove the observed inactivity risk.

Repo commit activitycaution

Only one commit was recorded in the last three months, showing very limited recent development activity and reinforcing the release-history concern.

Repo toolingcaution

The repository uses Babel and npm scripts, but no security scanning tools were detected. Build tooling is established, while security-process coverage is limited.