eslint-plugin-promise

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. This is the strongest concern because it indicates a recent collapse in observable development activity, even though version 7.3.0 was released recently.

Dangerous workflowscaution

One of four workflows uses pull_request_target, which can be risky when handling untrusted pull requests, but no untrusted checkouts or script-injection patterns were detected.

Lifecycle scriptscaution

The package uses a prepare install-time script, which adds some installation complexity and supply-chain exposure, although no other evidence indicates that the script is unsafe.

Release historycaution

This is a mature package first released over 10 years ago with 50 releases, but only one release in the last 12 months indicates a slower current cadence.

Repo issue activitycaution

There were four new pull requests in the last month, but none were merged and no issues were closed, suggesting limited recent throughput.