lolex

Registry deprecationdanger

The entire package is deprecated, with npm stating that it was renamed to @sinonjs/fake-timers and directing users to the replacement. This makes the release unfit for a new dependency despite other healthy project signals.

Release historydanger

The latest registry release was published on February 4, 2020, and there have been no releases in the last 12 months. Its long history and 44 releases show maturity, but the release gap is a serious abandonment concern for this package name.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Although the repository is not archived, the absent recent development supports the package's discontinued status.

Security policycaution

No repository security policy was found. This reduces transparency for vulnerability reporting, though the repository's security-scanning tooling provides some compensation.

Workflow auditcaution

The single workflow was fully analyzed, has read-only permissions, and has no detected injection or untrusted-checkout findings. However, all 16 referenced actions are unpinned, which is a supply-chain hygiene weakness.