ent

Project backingcaution

The repository is owned by an individual rather than an organization, so the small two-account registry maintainer base offers limited redundancy.

Release historycaution

The package has existed since February 2011 with 16 releases, but has had no release in the last 12 months and its latest release was in December 2024. Its long history partly offsets the current release inactivity.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured, reinforcing the lack of recent releases. The package's long history and stable scope provide only partial compensation.

Repo toolingcaution

The repository uses npm scripts for builds but reports no security-scanning tooling, leaving a modest transparency and hygiene gap.

Workflow auditcaution

All six workflows were analyzed without failed files or audit findings, and five use read-only permissions. However, all six action references are unpinned, leaving avoidable build-integrity risk.