import-meta-resolve

Release historycaution

The project has existed for about six years with 19 releases, but it has had no registry release in the last 12 months, which lowers confidence in current maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. Combined with no release in about one year, this is a real maintenance concern, though the project is not archived and has a substantial prior release history.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security scanning tools were detected. The build setup is sound while security-process transparency is limited.

Security policycaution

No repository security policy was found. This is a transparency gap, but it is not by itself evidence that the package is unsafe to depend on.

Token permissionscaution

The only workflow lacks top-level token permissions, so its default permissions are not explicitly constrained. No top-level write permissions were detected, making this a moderate hygiene concern rather than a severe risk.