indexof

Release historydanger

This is the only release, published about 14 years ago, with no releases in the last 12 months. That long period without visible release activity is strong evidence of abandonment risk.

Build provenancecaution

No build attestation or trusted-publisher provenance is available. This limits publication transparency, although the very small artifact and lack of lifecycle scripts reduce the practical concern.

Licensecaution

No license declaration or recognized license file was found for the release. The README mentions MIT, but the collected license evidence does not verify a formal license for the package.

Version stabilitycaution

Version 0.0.1 is not a stable major release, so compatibility expectations are limited; the lack of later versions reinforces the maintenance concern rather than compensating for it.