pathe

Release historycaution

The package has 25 releases over about five years, but its latest registry release was over a year ago and there were no releases in the last 12 months. Current repository activity partly offsets this, but release maintenance appears slow.

Repo toolingcaution

The repository uses TypeScript and Vite build tooling, but no security-scanning tool was detected. The mature build setup compensates for this as a modest transparency gap.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance unspecified. This is a transparency gap, though it is not evidence of abandonment.

Token permissionscaution

The CI workflow does not declare top-level token permissions. No write permissions were detected, but explicit least-privilege settings would provide stronger workflow hygiene.