make-cancellable-promise

Maintainerscaution

Only one registry account has publishing access. This is a modest operational concentration concern, though repository activity shows that account is currently active.

Project backingcaution

The repository is owned by an individual account rather than an organization, so the concentrated maintainer activity represents a genuine continuity concern.

Release historycaution

The package has existed since 2019 with eight releases, but it has had no registry release in the last 12 months. Recent repository commits and a recent push partly compensate for the slower release cadence.

Repo bus factorcaution

All six commits in the last three months came from one contributor, creating a meaningful continuity risk for a user-owned project with no organizational backing shown.

Repo toolingcaution

The project uses TypeScript, Vitest, npm scripts, and Vite, but no security-scanning tooling was detected. This is a hygiene gap rather than evidence of unsafe code.