is-yarn-global

Build provenancecaution

No build attestation or trusted-publisher identity is present, reducing publication transparency. This is a provenance gap rather than evidence that the package is unsafe.

Maintainerscaution

Only one registry account has publish access, leaving limited visible publishing capacity. The linked repository is also owned by an individual, so there is no organizational backing shown to compensate for that thin base.

Project backingcaution

The repository is owned by an individual rather than an organization, so the project shows limited institutional backing.

Release historycaution

The package has had no release in nearly four years and no releases in the last 12 months, which lowers confidence in ongoing maintenance. Its five releases over a long history provide some maturity but do not offset the current inactivity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.