passport-local

Release historydanger

The package has had no release in over 12 years, with zero releases in the last 12 months. Its eight-release history shows prior maturity, but the long gap materially raises staleness risk.

Build provenancecaution

No build provenance attestation or staged publishing was detected, so the release offers limited evidence connecting the published artifact to its source build.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the concern that maintenance has slowed substantially.

Repo toolingcaution

The repository uses Make for build tasks, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap, not an abandonment signal by itself.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear for an authentication strategy.