path-posix

Release historydanger

The only release was published in January 2015, and there have been no releases in more than 11 years. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

There have been zero commits and zero active maintainers in the last three months, consistent with the repository having stopped changing in January 2015.

Build provenancecaution

No build attestation or trusted-publisher provenance is present. For this small, directly shipped JavaScript package, this is a transparency limitation but not a severe health risk by itself.

Maintainerscaution

Only one registry maintainer is listed. That is a thin publishing base and increases continuity risk when combined with the absence of recent activity.

Project backingcaution

The repository is owned by an individual rather than an organization, and no organizational backing is shown. Combined with one registry maintainer, this leaves limited visible maintenance capacity.