node-dir

Build provenancecaution

No build provenance attestation or trusted-publisher metadata is present, so consumers have limited evidence about how the registry artifact was produced.

Release historycaution

The latest release was published in May 2017, with no releases in the last 12 months. This is a substantial maintenance concern, although the package has a long release history and the repository is not archived.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This reinforces the concern raised by the old latest release, though the repository is not archived.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 18 issues and 6 pull requests remain open. This suggests limited recent project activity.

Repo toolingcaution

The repository reports no build tooling and no security scanning tools. That is a transparency and maintenance gap, although the package is small and simple.