mkdirp

Lifecycle scriptscaution

The package uses prepare-related lifecycle scripts, which adds install-time build behavior and some supply-chain exposure, although the repository shows a TypeScript build and the artifact is already populated.

Project backingcaution

The repository is owned by an individual rather than an organization, so continuity depends on a relatively narrow ownership base.

Release historycaution

The package has a long history with 42 releases, but its latest release was about three years and five months ago and it had no releases in the last 12 months. That suggests maintenance has slowed substantially, though the package's maturity partly offsets the risk.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the old latest release, this is the clearest maintenance concern, though the package's long history and stable scope reduce abandonment risk.

Repo toolingcaution

The repository uses TypeScript build tooling, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than a severe dependency-health issue.