insert-module-globals

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is present, leaving the relationship between source and published artifact less transparent.

Dependency profilecaution

The package declares 10 runtime dependencies for its transform functionality. This is a moderate dependency surface rather than an unusually large one, but it adds maintenance coupling to an already old release.

Release historycaution

The package has 64 releases since 2013, but none in nearly six years; that long release gap raises abandonment and compatibility concerns despite its mature history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is consistent with the long release gap and weakens evidence of active maintenance.

Repo toolingcaution

No build tools or security scanning tools were detected in the repository. This is a transparency and hygiene gap, though it is less severe because the repository is small and includes tests.