chartjs-plugin-datalabels

Release historycaution

The package has 15 releases over roughly nine years, but none in the last 12 months and the latest release was about three years and nine months ago. This is a meaningful maintenance concern, though the stable release history shows prior maturity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, reinforcing the long gap since the latest registry release. The repository was pushed more recently than the release, so this is evidence of inactivity rather than proof of abandonment.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, alongside 96 open issues. This suggests limited current project activity and adds to the maintenance concern.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, but it is not evidence that the package is unsafe.

Workflow auditcaution

All nine analyzed action references are unpinned, and a high-confidence archived-action finding was reported; these are workflow supply-chain hygiene gaps. The cache-poisoning finding is low confidence, while the absence of untrusted checkouts and script injection limits the severity.