path

Release historydanger

The latest registry release was about 11 years ago, with no releases in the past 12 months. This is strong evidence of abandonment despite the package's long history.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the past 3 months. Combined with the old registry release, this materially increases abandonment risk.

Build provenancecaution

No build attestation or trusted-publisher provenance is present. This leaves publication origin less transparent, although it is not evidence that the release is unsafe.

Dependency profilecaution

The package declares two runtime dependencies, util and process, for a small compatibility module. This adds dependency surface to an otherwise minimal artifact.

Project backingcaution

The repository is owned by an individual user rather than an organization. That does not make the package unhealthy, but it provides no organizational backing to compensate for the thin recent activity.