grunt-legacy-util

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less independently verifiable. The package's repository, license, tests, and security policy provide some compensating transparency.

Package scaffoldingcaution

The package includes a README, tests, and a changelog, while the README clearly identifies these as deprecated Grunt utilities and points consumers toward replacement modules. This supports transparency but confirms meaningful legacy risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent registry release partly offsets this, but it does not demonstrate sustained development capacity.

Workflow auditcaution

All workflows were analyzed successfully with no injection or high-severity findings, but both referenced actions are unpinned. The workflow has no top-level permissions block, which is acceptable on its own.