backbone

Release historycaution

The package has 33 releases over roughly 15 years, but none in the last 12 months despite a latest release in April 2025. That suggests slowing maintenance, though the long release history supports maturity.

Repo bus factorcaution

All 2 recent commits came from one contributor, giving the project a concentrated short-term bus factor. The established project history partly offsets this, but not the current maintenance concentration.

Repo commit activitycaution

The repository had only 2 commits in the last 3 months. This shows some ongoing activity, but the pace is too low to indicate active maintenance.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkout or script-injection paths, but both action references are unpinned and it installs a package outside a lockfile. These are limited build-hygiene concerns, not severe risks.