new-find-package-json

Release historydanger

The latest release was published on May 24, 2022, with no releases in the last 12 months, indicating a long period without maintenance activity.

Lifecycle scriptscaution

The package has a prepare install-time script, adding execution during installation and a modest supply-chain hygiene concern despite no other provided evidence of unsafe behavior.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the extended release gap and raising abandonment risk.

Workflow auditcaution

All 10 analyzed action references are unpinned, which weakens build reproducibility. However, all three workflows use read-only permissions, and there are no untrusted checkouts, script injections, or audit findings.