istanbul-lib-coverage

Release historycaution

The package has 29 releases and a steady historical median interval of about 38 days, but its latest registry release was in November 2023, with none in the last 12 months. This materially raises maintenance and abandonment concern.

Repo commit activitycaution

The linked organization repository recorded no commits and no active maintainers in the last three months. That weakens evidence of ongoing maintenance despite the repository not being archived.

Workflow auditcaution

All seven analyzed action references are unpinned, and the audit identified trusted publishing plus a medium-confidence template-injection pattern. The workflows were fully analyzed and have no untrusted checkouts or script-injection findings, so this is a hygiene concern rather than a severe risk.