@stoplight/path

Build provenancecaution

No build attestation, trusted publisher, or staged publishing evidence was provided. This is a transparency weakness, although it is not by itself evidence that the release is unsafe.

Release historycaution

The package has 33 releases since July 2018, but its latest registry release was in March 2024 and there were no releases in the last 12 months. That long pause lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the long registry release pause, this is evidence of slowed maintenance.

Repo issue activitycaution

There was no new or closed issue activity in the last month, and five pull requests remain open. This suggests limited recent project movement, though it is weaker evidence than the commit gap.

Repo toolingcaution

The repository uses TypeScript and npm scripts for its build, but no security scanning tools were detected. The missing scanning is a modest project-hygiene gap.