istanbul-lib-hook

Release historydanger

The package has 28 releases since 2015, but its latest release was in December 2019 and it had no releases in the last 12 months, indicating substantial maintenance stagnation.

Repo commit activitycaution

The linked repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of current maintenance even though the repository is not archived.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention istanbul-lib-hook, creating uncertainty about how directly the repository represents this package. The monorepo file tree does contain the package directory, which partly offsets that concern.

Workflow auditcaution

All seven analyzed action references are unpinned, and the workflow uses trusted publishing with a long-lived token; these reduce build reproducibility and supply-chain transparency. The medium-confidence template-injection finding is not corroborated by an untrusted checkout or script-injection trigger.