is-dom

Build provenancecaution

The release has no build attestation or trusted-publisher provenance. This weakens publication transparency, though it is not by itself evidence that the release is unsafe.

Release historycaution

The package has had no release in about 7 years, with 0 releases in the last 12 months. Its 10-release history shows earlier activity, but the long current gap raises abandonment risk.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the prolonged release gap and leaving little evidence of ongoing maintenance.

Repo issue activitycaution

There are 2 open issues, with no new or closed issues and no pull-request activity in the last month. This is a modest maintenance concern rather than evidence of severe abandonment by itself.

Repo toolingcaution

The repository reports no build tools and no security-scanning tools. For this small JavaScript package the build gap is limited, but the lack of scanning reduces maintenance transparency.