is-bigint

Lifecycle scriptscaution

The package uses prepack and prepublish lifecycle scripts, which can add build-time supply-chain surface. No provided signal shows these scripts are harmful, so this is a limited caution rather than a severe risk.

Release historycaution

The package has six releases since September 2018, but none in the last 12 months and the latest release was about 21 months ago. This is a meaningful maintenance concern, despite the package's long history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a concrete sign of currently slow maintenance, partially offset by the recent repository push shown elsewhere.

Repo issue activitycaution

There is one open issue, with no new or closed issues and no pull requests in the last month. This is quiet rather than clearly abandoned, but it offers little evidence of active support.

Workflow auditcaution

All six workflows were analyzed successfully and no audit findings or dangerous untrusted checkouts were reported. However, all six action references are unpinned, leaving avoidable build-integrity exposure; the pull_request_target triggers have no reported sink.