@protobufjs/path

Release historycaution

The package has had no registry release in nearly nine years, with zero releases in the last 12 months. This is a meaningful freshness concern despite current activity in the linked repository.

Repo toolingcaution

The repository uses build tooling, but no security-scanning tools were detected. This is a modest transparency gap, partly offset by the separate security policy and active maintenance.

Workflow auditcaution

All workflows were analyzed without failures, but all 12 action references are unpinned and one workflow grants top-level write access. High-confidence adhoc-package findings add hygiene concerns; the low-confidence cache finding is not independently decisive.