lottie-web

Release historycaution

The package has 89 releases over more than eight years, but it has had no releases in the last 12 months despite a historical median interval of about 15 days. This is a meaningful maintenance slowdown.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with the release slowdown, this indicates a clear recent maintenance gap.

Repo issue activitycaution

Issue and pull request activity is low, with one issue opened and closed and two pull requests opened in the last month, with none merged. This provides only limited evidence of active maintenance.

Repo toolingcaution

The repository uses established build tools, but no security-scanning tools were detected. The missing scanning is a modest transparency and supply-chain hygiene gap, not evidence of unsafe behavior by itself.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or untrusted checkout and script-injection sinks. However, both action references are unpinned, leaving avoidable build-integrity risk.