npmlog

Registry deprecationdanger

The registry marks the entire package as deprecated with the message “This package is no longer supported,” and provides no replacement. This is a direct adoption risk.

Release historydanger

The package has a long history with 34 releases, but its latest release was on October 19, 2022 and it had no releases in the last 12 months. Its historical maturity does not compensate for the prolonged release gap.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. This confirms that current maintenance capacity has collapsed.

Repository archiveddanger

The linked npm/npmlog repository is archived, despite a last push on May 3, 2024. Archiving strongly indicates the project is no longer an active dependency target.

Workflow auditcaution

All 38 analyzed action references are unpinned, and the audit found high-confidence template-injection findings in pull-request and release workflows plus a medium-confidence bot-condition finding. No untrusted checkout or script-injection trigger was reported, so these are serious hygiene concerns rather than the primary reason for the score.