packageurl-js

Release historycaution

The package has had no registry releases in the last 12 months, and its latest release was about two years ago. The repository was pushed recently, which partly offsets abandonment concerns but does not restore release cadence.

Repo bus factorcaution

All recent commits came from one contributor. Organization backing provides some compensation, but current activity still depends on a single active contributor.

Repo commit activitycaution

Only one commit was recorded in the last three months, so current development activity is limited even though the repository was recently pushed.

Repo toolingcaution

No build or security scanning tools were detected, leaving limited evidence of automated quality and security checks.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.