lilconfig

Build provenancecaution

No build attestation, trusted publisher, or staged publishing was detected, so the release has limited publication provenance.

Release historycaution

The package has 17 releases over about 6 years, but no registry release in about 21 months. That slows confidence in ongoing maintenance, though the established history is a compensating signal.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last 3 months, which is a meaningful maintenance warning alongside the long release gap.

Repo toolingcaution

The repository uses TypeScript and webpack, but no security scanning tools were detected. This is a modest transparency and hygiene gap, not evidence of abandonment by itself.

Security policycaution

No security policy was found in the repository, leaving vulnerability-reporting expectations undocumented.