es5-ext

Lifecycle scriptscaution

A postinstall script runs during installation, increasing build and supply-chain complexity. The provided release notes specifically document a recent postinstall regression, so this is a real operational concern rather than a cosmetic gap.

Release historycaution

The package has 84 releases over more than 15 years, but none in the last two years. That long history supports maturity, while the recent release gap raises maintenance concerns.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, consistent with the absent recent registry releases and indicating limited current maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented. This is a transparency gap, though it is partly offset by the repository's tests and established project documentation.

Workflow auditcaution

All three workflows were analyzed without dangerous triggers or audit findings, but all three action references are unpinned. That leaves routine workflow dependencies less reproducible than they could be.