node-machine-id

Release historydanger

The package has 11 releases since 2016, but its latest registry release was in May 2019 and it had no releases in the last 12 months. This is a substantial maintenance concern for a dependency.

Build provenancecaution

No build attestation or trusted-publisher provenance is present. This limits publication transparency, although it is not by itself evidence that the package is unsafe.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating currently inactive development despite the repository not being archived.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 22 issues and 5 pull requests remain open. This supports a picture of limited ongoing project activity.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented.