is-window

Release historydanger

The latest release was about 10 years ago, with no releases in the last 12 months. The four-release history shows an established package, but not current maintenance.

Repo commit activitydanger

The repository has recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long release gap and limited evidence of ongoing maintenance.

Build provenancecaution

The release has no build provenance attestation or trusted-publisher metadata. This is a modern publishing-transparency gap, not evidence that the package is unsafe.

Maintainerscaution

Only one registry account has publish access, which is a continuity concern, although the repository is owned by an organization, making a short registry maintainer list less significant.

Repo toolingcaution

The repository reports no build tool and no security scanning tools. For a tiny dependency-free package this is a modest transparency gap, but it adds little evidence about active maintenance.