app-root-path

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less independently verifiable than it could be.

Release historycaution

The package has 16 releases since 2014, but no registry release in roughly four years. Its README says the module has deliberately limited scope, which partly offsets the long pause.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months; combined with the last 2022 push, this is the main abandonment concern.

Repo issue activitycaution

There are open issues and pull requests, but none were opened or merged in the measured month, consistent with a currently inactive project.

Repo toolingcaution

The repository uses a build tool, but no security scanning tooling was detected. For this small, dependency-free package, that is a modest transparency gap rather than a severe risk.