is-docker

Release historycaution

This is a mature package released over many years, but it has had no registry release in the last 12 months. That is a modest maintenance concern for a small, stable utility rather than evidence of abandonment by itself.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. The recent release and small, stable scope partly compensate, but the lack of current activity is still a maintenance caveat.

Repo toolingcaution

No build tools or security-scanning tools were detected. This is a transparency and automation gap, though the package is a very small dependency-free utility.

Token permissionscaution

The only workflow lacks top-level token permissions, so its effective permissions are not explicitly constrained. No top-level write permissions were detected, making this a minor workflow-hygiene concern rather than a severe risk.