es6-object-assign

Release historydanger

The package has five releases, but none in the last nine years; its latest release was published in March 2017. This strongly suggests maintenance has stopped, although the package is small and stable.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months. Combined with the last push in March 2017, this is strong evidence of abandonment risk.

Maintainerscaution

Only one account has registry publish access. For this independently owned small package that leaves little visible publishing capacity if the maintainer is unavailable.

Project backingcaution

The repository is owned by the individual user rubennorte rather than an organization. That is consistent with the single-maintainer signal and provides no additional organizational continuity.

Repo toolingcaution

The repository uses npm scripts, but it reports no security-scanning tools. That is a meaningful hygiene gap, though the package has no runtime dependencies and is a small utility.