@pm2/io

Build provenancecaution

No build attestation or trusted-publisher provenance was provided, leaving publication origin less verifiable. This is a transparency gap rather than evidence that the release is unsafe.

Release historycaution

The project has 107 releases and a long history, but it has had no registry release in nearly two years, which raises maintenance and abandonment concerns.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This is a meaningful maintenance concern, although the separate recent repository push provides some counterevidence.

Repo issue activitycaution

The repository has open issues and pull requests, but no issues or pull requests were opened or closed in the last month, indicating limited recent activity.

Repo toolingcaution

The repository uses TypeScript, webpack, and npm scripts, showing an established build process, but no security scanning tools were detected.