acorn-node

Licensecaution

The artifact and repository contain license files, but the declared Apache-2.0 license does not fully match the detected Apache-2.0 and MIT texts. That mismatch reduces licensing clarity.

Release historycaution

The package has had no registry release in over six years, with zero releases in the last 12 months. Its 17-release history shows prior activity, but the long gap materially raises maintenance risk.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months. The recent repository push provides limited compensation, but does not demonstrate ongoing development activity.

Repo toolingcaution

The repository uses Babel and npm scripts for builds, showing established build tooling, but it reports no security scanning tools, leaving a modest hygiene gap.

Workflow auditcaution

The only workflow was fully analyzed with no untrusted checkouts, script injection, or high-severity findings. However, all four action references are unpinned, leaving avoidable build reproducibility and action-change risk.