import-without-cache

Maintainerscaution

Only one registry account has publish access, creating a thin operational base; the matching repository and provenance provide some compensating ownership evidence but not redundancy.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, a meaningful maintenance concern despite the recent registry release activity.

Security policycaution

No security policy is present, leaving vulnerability-reporting and response expectations less transparent for a package that modifies module loading behavior.

Token permissionscaution

Two workflows declare read-only permissions, but one release workflow lacks top-level permissions, leaving its token scope less explicit than ideal.

Type declarationscaution

No type declarations were detected even though the README presents TypeScript-oriented usage, which can reduce integration quality for consumers relying on type checking.