object-is

Lifecycle scriptscaution

The package uses prepack and prepublish lifecycle scripts. These are packaging-related rather than evidence of an install-time runtime action, but they add some build complexity.

Release historycaution

The package has existed since February 2014 with 11 releases, but it has had no release in the last 12 months; the latest release was February 2024, which lowers confidence in active maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, indicating limited recent development activity despite the repository remaining available.

Workflow auditcaution

All five workflows were analyzed with no audit findings and no untrusted checkout or script-injection sinks. However, all five action references are unpinned, leaving workflow dependencies exposed to reference changes.