is-extglob

Build provenancecaution

No build provenance attestation or trusted-publisher metadata is present, reducing publication transparency. The package's minimal, dependency-free artifact partly limits the practical impact.

Release historycaution

The latest release was published in December 2016, with no releases in the last 12 months. That long release gap lowers confidence in ongoing maintenance, although a small stable utility may need few changes.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the repository having gone quiet for several years. This is the main abandonment concern.

Repo toolingcaution

The repository uses a build tool, but no security scanning tooling was detected. For this small package that is a modest transparency gap rather than a severe risk.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations undocumented. This is a hygiene concern, not evidence of an unsafe release.