detect-port-alt

Release historydanger

The latest registry release was over eight years ago, with no releases in the last 12 months. That substantially lowers confidence in this specific release's maintenance, even though the package has a multi-year history.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. Its recent push timestamp is some compensating evidence, but does not show sustained recent development.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the linkage is not clearly established. This is more concerning than a simple monorepo sub-package mismatch because both name and README evidence are absent.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance less clear. This is a transparency gap rather than evidence of unsafe code.

Workflow auditcaution

All three workflows were analyzed without detected sinks or audit findings, and none grants top-level write permissions. However, all four action references are unpinned, so their versions can change without a repository change.