pac-proxy-agent

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, a meaningful sign that maintenance activity has recently stalled despite the recent release history.

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, creating some uncertainty about package-to-repository alignment; the multi-package source tree partly explains the name mismatch but not the missing mention.

Repo toolingcaution

The project uses TypeScript, npm scripts, Vitest, and Turbo, showing structured build and test tooling, but no security-scanning tools were detected.

Security policycaution

No repository security policy was found, reducing transparency for reporting and handling vulnerabilities.

Workflow auditcaution

All 13 analyzed action references are unpinned, and the release workflow installs a package outside a lockfile; the cache-poisoning findings are low-confidence hygiene observations rather than decisive evidence.