parse-glob

Lifecycle scriptscaution

A prepublish lifecycle script runs during publishing, adding some supply-chain and reproducibility complexity, although this signal alone does not show a dangerous install-time action.

Release historycaution

The package has 14 releases, but its latest release was nearly 11 years ago and there were no releases in the last 12 months, indicating long-term maintenance inactivity. Its stable version history provides some maturity but does not offset the age of the release.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, reinforcing that the project is not actively maintained. The non-archived repository is a limited compensating signal but does not restore recent maintenance.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with only two open issues and one open pull request; this suggests little recent project attention.

Repo toolingcaution

The repository has no build tooling or security scanning configured, which reduces automated maintenance and security transparency. Its small, simple file tree limits the practical impact of this gap.