async-limiter

Build provenancecaution

The release has no build attestation or trusted-publisher provenance. This weakens publication transparency, though it is not by itself evidence that the package is unsafe.

Project backingcaution

The repository is owned by an individual account rather than an organization. That is not inherently unhealthy, but it provides less visible institutional backing for a project with no recent commits.

Release historycaution

The latest release was in November 2019, with no releases in the last 12 months and only three releases overall. This is the main maintenance concern, although the package is small and stable.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with the old latest release, this indicates weak current maintenance capacity.

Repo issue activitycaution

There are no open issues, but 12 open pull requests and no pull requests merged in the last month suggest outstanding changes are not being actively processed.