p-is-promise

Project backingcaution

The repository is maintained under a named individual account rather than an organization, so continuity depends on a relatively narrow project owner.

Release historycaution

The package has six releases over roughly ten years, but the latest registry release was in April 2021 and there were no releases in the following 12 months, indicating a dated release line.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence of ongoing maintenance capacity.

Repo toolingcaution

The repository has no detected build or security-scanning tooling; for this small package this is a hygiene gap rather than a severe dependency risk.

Workflow auditcaution

All workflows were analyzed with no audit findings or untrusted checkouts, but both action references are unpinned, leaving avoidable workflow reproducibility risk.