esm-env

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no organizational backing shown by this signal; this matters alongside the thin recent activity.

Release historycaution

The package has existed for over three years with nine releases, but it has had no registry release in the last 12 months; the latest release was over 20 months before collection.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, which weakens evidence of current maintenance despite the recent push timestamp.

Repo toolingcaution

No build tool or security scanning tool was detected. This is a modest repository hygiene gap, though the package is small and the workflow audit provides separate coverage.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities.