koa-send

Release historycaution

The latest registry release was July 2020, about 6 years and 2 months before collection, with no releases in the last 12 months. The 29-release history shows prior maturity but not current package maintenance.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last 3 months. A separate repository signal shows it was pushed in April 2025, which partly offsets but does not remove the recent inactivity concern.

Type declarationscaution

The package provides no type declarations, which adds integration friction for TypeScript consumers. This is a consumer-ergonomics gap rather than evidence of abandonment or unsafe publishing.

Workflow auditcaution

All 2 analyzed action references are unpinned, creating avoidable build reproducibility and dependency-drift risk. There were no untrusted checkouts, injection findings, dangerous triggers, or high- or medium-severity audit findings.