@sinonjs/fake-timers

Lifecycle scriptscaution

A prepare install-time script is present, so installation performs extra package-defined work. This is a modest build-hygiene concern, not evidence of abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Frequent registry releases and a recent push partly offset this, but the recent source-activity gap remains significant.

Repo issue activitycaution

There were four new pull requests in the last month, but no issues or pull requests were closed or merged, which weakens evidence of recent maintenance throughput.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance and disclosure expectations unclear.

Workflow auditcaution

The workflow audit completed cleanly with read-only permissions and no dangerous findings, but all 16 action references are unpinned, leaving the build exposed to moving action revisions.