is-data-descriptor

Lifecycle scriptscaution

The package uses prepack and prepublish lifecycle scripts. These add build-time execution surface, but no evidence here shows harmful behavior or unusual installation-time execution.

Release historycaution

The package has existed since 2015 with 13 releases, but its latest registry release was in October 2023 and there were no releases in the last 12 months, indicating slow maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent push date elsewhere is a compensating sign, but current development activity is still limited.

Repo issue activitycaution

There are no open issues or pull requests and no activity in the last month. This is consistent with a small stable utility, but provides little evidence of active maintenance.

Workflow auditcaution

All five workflows were analyzed with no audit findings and no untrusted checkouts or script injections. However, all five action references are unpinned, leaving avoidable update and provenance risk; pull_request_target triggers are present without a detected sink.