fs-readdir-recursive

Release historydanger

The package has seven releases but none in the last 12 months, and its latest release was in November 2017. This is a substantial maintenance and abandonment concern for a dependency, despite its long history.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no recent updates. The inactive project is not archived, but maintenance capacity is currently unproven.

Build provenancecaution

The release has no build attestation or trusted-publisher provenance. This weakens publication transparency, particularly for a package last released under older registry practices.

Repo toolingcaution

The repository reports no build tooling and no security-scanning tooling. For this small dependency that is not severe, but it limits evidence of modern maintenance and security practices.

Security policycaution

No repository security policy was found. This is a transparency gap, though the package's small scope and lack of runtime dependencies reduce its practical weight.