iterate-iterator

Lifecycle scriptscaution

A prepublish lifecycle script is present, adding release-time automation that deserves review, although it is not evidence of an unsafe install by itself.

Release historycaution

The package has only 3 releases and none in the last 12 months; its latest release was about 4 years ago, which raises maintenance and abandonment concerns.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and weakening evidence of active maintenance.

Workflow auditcaution

All 6 analyzed action references are unpinned, reducing build reproducibility; the two pull_request_target workflows had no untrusted checkouts or script injections, so this is a hygiene concern rather than a severe workflow risk.