decko

Release historydanger

The latest release was on February 27, 2017, with no releases in the last 12 months. This long period without published updates is a substantial maintenance concern, despite the package having six releases overall.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months. That indicates maintenance has stopped or become highly intermittent, with no provided activity signal to compensate.

Lifecycle scriptscaution

A prepublish lifecycle script is present. This adds some packaging complexity, but the signal does not show an install-time script or evidence that the script is unsafe.

Repo toolingcaution

The project uses TypeScript, Babel, and npm scripts for its build, but no security scanning tools were detected. This is a hygiene gap rather than evidence of abandonment on its own.

Security policycaution

The repository has no security policy. For a small library this is a transparency gap, although the other repository and package signals provide useful documentation and structure.