is-standalone-pwa

Release historycaution

The package has had only two releases, both in November 2024, with no releases in the last 12 months. This is substantial evidence of limited ongoing maintenance for a package published nearly two years ago.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the absence of recent maintenance activity.

Repo popularitycaution

The repository has 3 stars, 1 fork, and 1 watcher, providing little supporting evidence of broad review or community backing. Low popularity is not disqualifying for a small utility, but it leaves fewer external signals of durability.

Security policycaution

No security policy was found. For a small browser utility this is a transparency gap, though its zero runtime dependencies limit the exposed dependency surface.

Workflow auditcaution

The single workflow was fully analyzed and has no untrusted checkout or script-injection path, but both action references are unpinned and the audit reported a high-severity, low-confidence cache-poisoning pattern plus a high-confidence adhoc package install.