array-unique

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last 3 months. Combined with the old last push and release, this materially raises the risk that issues and fixes will not receive attention.

Build provenancecaution

No build attestation or trusted-publisher provenance is present. This is a transparency gap, though the package is a small direct JavaScript artifact with no runtime dependencies.

Release historycaution

The package has existed for about 12 years, but its latest release was about 10 years ago and it had no releases in the last 12 months. This is strong evidence of an aging, inactive release line.

Repo toolingcaution

The repository uses a build tool but has no security-scanning tooling. For an older package this weakens ongoing detection and maintenance hygiene.

Repository archivedcaution

The linked repository is not archived, which is a compensating signal against abandonment. However, its last push was about 6 years ago, so it does not demonstrate active maintenance.