istanbul-api

Registry deprecationdanger

The registry marks the entire package as deprecated and describes it as unmaintained, with no replacement specified. This is a direct adoption warning and outweighs the otherwise healthy repository context.

Release historydanger

The package has 57 historical releases but none in the last 12 months; its latest release was in May 2019, indicating prolonged release abandonment.

Repo commit activitycaution

The linked repository shows zero commits and zero active maintainers in the measured three-month period. This provides no current maintenance evidence for the package, even though other repository metadata is active.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention it, so the repository may represent the broader project rather than this specific package.

Workflow auditcaution

Both workflows were analyzed without failures and have no untrusted checkout or script-injection findings, but all seven action references are unpinned. The medium-confidence template-injection finding and informational trusted-publishing finding add workflow hygiene concerns, not a standalone severe risk.