is-bun-module

Lifecycle scriptscaution

A prepare install-time script runs during package installation, adding execution behavior that consumers must trust, though this is not severe on its own.

Project backingcaution

The repository is owned by an individual rather than an organization, so continuity depends on a relatively small project owner base.

Release historycaution

The package has eight releases and historically released about every 18 days, but there have been no registry releases in the last 12 months, creating a maintenance-cadence concern.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All four workflows were analyzed with no audit findings or untrusted checkout and script-injection sinks. However, 13 of 20 action references are unpinned, which weakens build reproducibility.