null-loader

Release historydanger

The package has 7 releases since July 2014, but its latest release was on 2020-10-09 and there were no releases in the last 12 months. The long release gap reinforces the maintenance concern.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the archived state and providing no evidence of ongoing maintenance.

Repository archiveddanger

The linked webpack-contrib/null-loader repository is archived, with its last push on 2020-12-22. This is a severe abandonment signal that outweighs the package's otherwise solid documentation and project structure.

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less transparent. This is a supply-chain transparency gap, but it does not outweigh the repository's stronger direct maintenance evidence.

Lifecycle scriptscaution

The package defines a prepare install-time script, which adds execution during installation. No provided signal shows that this script is harmful, so it is a modest hygiene concern rather than a severe finding.