async-function

Release historycaution

The package has existed since September 2016 but has only two releases, with none in the last 12 months; the January 2025 release shows it is not abandoned outright, but cadence is very sparse.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating limited recent maintenance despite a later repository push timestamp elsewhere.

Workflow auditcaution

All 6 of 6 analyzed action references are unpinned, and one workflow grants top-level write permissions. Five workflows use read-only permissions and there are no untrusted checkouts, script injections, or auditor findings, so this is a hygiene concern rather than a severe risk.