path-is-inside

Release historydanger

The latest release was about 10 years ago, with no releases in the last 12 months and only three releases overall. This is the main abandonment concern, although the stable 1.0.2 version may be sufficient for a small utility.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with a project that has seen little recent development. The repository is not archived, but current maintenance capacity appears limited.

Maintainerscaution

Only one registry account has publish access, which gives the package a thin publishing base. That is a modest resilience concern for a package without broader organizational backing.

Project backingcaution

The repository is owned by an individual account rather than an organization, providing limited visible project backing. This reinforces the concern from the single registry maintainer.

Repo toolingcaution

The repository reports no build tools or security scanning tools. For this small dependency, that is a minor transparency and hygiene gap rather than evidence that it is unfit to use.