npm-registry-utilities

Release historydanger

The package has made only one release, on March 11, 2022, with no releases in the last four years. That leaves current maintenance and compatibility uncertain.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having been inactive for over four years.

Repo toolingcaution

The repository reports no build tooling and no security scanning. This weakens maintenance and security hygiene, although the package does include tests and a clear artifact structure.

Security policycaution

No security policy is present, reducing transparency for reporting and handling vulnerabilities. This matters more for a package with no recent maintenance activity.

Workflow auditcaution

All 34 workflow action references are unpinned, and the audit identifies high-severity cache-poisoning patterns with low confidence plus high-confidence use of long-lived publishing credentials. The repository has no untrusted checkout or script-injection findings, which limits the risk.