deep-extend

Release historydanger

The package has 21 releases, but its latest release was about 8 years ago and it has had no releases in the last 12 months. This is strong evidence of slowed maintenance, though the long release history suggests prior maturity.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the measured three-month period. This reinforces the substantial age of the latest registry release and raises abandonment risk.

Build provenancecaution

The release has no build provenance attestation or trusted-publisher metadata. This weakens publication transparency, although the package is a small, dependency-free artifact.

Repo issue activitycaution

There were no new or closed issues or pull requests in the measured month, while 10 issues and 3 pull requests remain open. The lack of recent activity is consistent with a dormant project.

Security policycaution

The linked repository has no security policy. This leaves vulnerability reporting and maintainer response expectations undocumented, a modest transparency gap for a dependency.