direction

Release historydanger

The latest registry release was in November 2021, nearly five years before collection, with no releases in the last 12 months. This is the strongest abandonment concern despite the package's long history and 16 total releases.

Build provenancecaution

No build attestation or trusted-publisher provenance was detected. This limits publication transparency, though it is a hygiene gap rather than a standalone dependency verdict.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no organizational backing signal to offset the thin maintenance activity.

Repo commit activitycaution

There were no commits or active maintainers in the three months measured. The October 2024 push is compensating evidence, but it does not remove the recent inactivity concern.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security scanning tools were detected. This is a modest transparency and maintenance-hygiene gap.