log-node

Release historydanger

The latest release was in December 2021, with no releases in nearly five years. The package has a long history and 14 releases, but the extended release gap raises abandonment risk.

Maintainerscaution

Only one registry publishing account is listed, leaving little visible publishing redundancy. This is a concern for continuity, although the linked repository identifies the same individual owner.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and limited evidence of ongoing maintenance.

Workflow auditcaution

All 34 analyzed action references are unpinned, and the audit reports high-severity but low-confidence cache-poisoning patterns plus a high-confidence trusted-publishing concern. The workflows were fully analyzed and showed no untrusted checkout or script-injection paths.