is-subset

Release historydanger

The package has only two releases, both in April 2015, with no releases in the last 12 months. This indicates a long-standing lack of release maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. This confirms that maintenance has stopped rather than merely slowed.

Repository archiveddanger

The linked repository is archived, and its last push was in July 2018. An archived source project is a severe abandonment signal for a dependency.

Build provenancecaution

No build provenance attestation or trusted-publisher information is present. This limits publication transparency, though it is secondary to the clear maintenance failure.

Lifecycle scriptscaution

The package has a prepublish lifecycle script, adding a small amount of install and publication complexity. No other evidence compensates for that risk.