@rollup/plugin-inject

Release historydanger

The package has had no registry release in nearly three years, despite a reasonable earlier median interval of about 72 days. This materially raises maintenance and abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the long release gap, this is a substantial maintenance concern.

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less transparent than it could be.

Lifecycle scriptscaution

The package runs a prepare lifecycle script, which adds build-time installation behavior that consumers should account for, but this alone is not a severe health concern.

Repo package mentioncaution

The repository name differs from the package and its README does not mention this package. Although a monorepo mismatch is ordinary, the lack of a direct mention creates some ownership-transparency uncertainty.