apache-md5

Maintainerscaution

Only one registry maintainer account is listed, leaving the package dependent on a single publisher. The repository is also owned by an individual rather than an organization, so there is no shown backing to offset that concentration.

Release historycaution

The package has 15 releases over nearly 13 years, but no releases in the last 12 months and its latest release was in September 2022. This materially raises maintenance and abandonment concerns.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the repository was pushed in June 2024, current development activity is still weak.

Repo toolingcaution

No build tool or security scanning tool was detected in the repository. For this small JavaScript package that is a modest process gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy. This is a transparency gap, though the small, narrowly scoped package and absence of reported workflow injection paths reduce its practical weight.