object.fromentries

Lifecycle scriptscaution

A prepublish lifecycle script is present. This is a modest publishing-process concern, though the signal does not show an install-time script executing consumer-controlled code.

Release historycaution

The package has 11 releases since April 2018, but none in the last 12 months and its latest registry release was over two years ago, indicating slowed maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, leaving current maintenance activity unconfirmed despite the repository not being archived.

Workflow auditcaution

All five workflows were analyzed with no audit findings or untrusted checkouts, and none uses top-level write permissions. However, all five of five action references are unpinned, creating a supply-chain hygiene gap.