es-get-iterator

Dependency profilecaution

The package has nine runtime dependencies for a small compatibility library, including several focused utility packages. This adds some transitive maintenance surface but is not excessive enough to be a severe concern.

Project backingcaution

The repository is owned by a user account rather than an organization, so the single registry maintainer is not explained by organization backing. This leaves a relatively thin ownership base, though the repository itself is active enough to offset part of that concern.

Release historycaution

The package has existed for about 6 years 10 months with seven releases, but it has had no release in the last 12 months and its latest release was in January 2023. The long history supports maturity, while the extended release gap lowers confidence in active maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the lack of recent registry releases, this indicates currently limited maintenance activity.

Repo toolingcaution

The repository uses Rollup, showing an established build process, but no security-scanning tooling was detected. The missing scanner is a hygiene gap, not proof of unsafe code.