@napi-rs/nice

Release historycaution

The package has had no registry release in the last 12 months, despite a relatively young history and five releases overall; this indicates a meaningful maintenance slowdown.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the release-history concern and raising abandonment risk.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security scanning tools were detected; this is a modest transparency and hygiene gap.

Workflow auditcaution

The single workflow was fully analyzed and scopes permissions at job level, with no untrusted checkout or script-injection trigger. However, all 30 action references are unpinned and a high-confidence audit finding reports an ad hoc package install; the low-confidence cache findings are hygiene concerns only.