browser-sync-client

Repo commit activitydanger

The repository had 0 commits and 0 active maintainers in the last three months, consistent with the archived state and leaving little evidence of ongoing maintenance.

Repository archiveddanger

The linked repository is archived, and its last push was in December 2017. That is a severe abandonment warning despite the package receiving a registry release later.

Build provenancecaution

No build attestation or trusted-publisher provenance is present. This reduces publication transparency, although it is not by itself evidence that the release is unsafe.

Licensecaution

The package declares ISC, while its artifact license file is detected as Apache-2.0; the repository also contains a license file. The presence of licensing is positive, but the mismatch creates a documentation and compliance caution.

Release historycaution

The package has 101 releases over a long history, but none in the last 12 months and its latest release was about 17 months ago. Historical maturity partly offsets the slowing cadence, but not the repository evidence.