klona

Project backingcaution

The repository is owned by an individual rather than an organization, so the single registry maintainer is consistent with the observed project backing. This still implies a relatively narrow maintenance base.

Release historycaution

The latest registry release was about 3 years ago, with no releases in the last 12 months. The package has a mature history with 12 releases, but the long release gap raises maintenance concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with the absent recent registry releases, this indicates currently quiet maintenance.

Repo toolingcaution

The repository uses npm build scripts but has no detected security scanning tools. The missing scanning is a modest transparency gap, not evidence that the package is unsafe.

Security policycaution

No security policy was found in the repository, leaving vulnerability reporting expectations unclear. This is a maintenance and transparency gap, but not severe on its own.