is-boolean-object

Build provenancecaution

No build attestation or trusted-publisher identity is present, leaving publication provenance less transparent than it could be.

Maintainerscaution

Only one registry publisher account is listed, which is a modest resilience concern, although the repository is owned by an organization and the package has a long history.

Release historycaution

The package has existed since April 2015 and has eight releases, but no releases were published in the last 12 months; the latest release was in February 2025, indicating a long maintenance gap.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a concrete sign of currently slow maintenance.

Workflow auditcaution

All seven workflows were analyzed successfully with no audit findings or untrusted checkouts. However, all seven action references are unpinned, weakening build reproducibility and action supply-chain hygiene.