is-finalizationregistry

Release historycaution

The package has five releases over about six years, but none in the last 12 months; its latest release was published in December 2024, nearly two years before this assessment. This indicates slowing maintenance rather than abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the older latest release, this raises the risk of slow maintenance.

Repo toolingcaution

The repository uses TypeScript build tooling, but no security scanning tools were detected. The build setup is a positive; the missing scanning is a modest hygiene gap rather than a dependency-health failure.

Workflow auditcaution

All six workflows were analyzed with no audit findings, and the pull_request_target workflows have no untrusted checkout or script-injection sinks. However, all six action references are unpinned, leaving avoidable build-integrity risk.