asn1.js-rfc5280

Release historydanger

The package has made no releases in nearly nine years, despite twelve releases overall; this is strong evidence of stalled maintenance, though the repository was pushed more recently.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, reinforcing the lack of recent release activity and indicating limited ongoing maintenance.

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, so the package-to-repository link is less transparent even though the repository contains the RFC 5280 subdirectory.

Repo toolingcaution

The repository reports no build tooling or security scanning, which limits automated maintenance and security hygiene for a package with little recent activity.

Security policycaution

No security policy is present, leaving vulnerability-reporting expectations unclear; this is a transparency gap rather than evidence of a specific vulnerability.