pify

Release historycaution

The latest release was nearly four years ago, with no releases in the last 12 months; this is a meaningful maintenance concern despite a long package history and 13 total releases.

Repo bus factorcaution

All recent commits come from one contributor, creating a concentrated maintenance dependency without evidence of a broader active base.

Repo commit activitycaution

Only one commit from one active maintainer was recorded in the last three months; this shows some activity but provides weak evidence of sustained maintenance.

Repo toolingcaution

No build tool or security scanning tool was detected. For this small package that is a hygiene gap, but it is partly offset by the simple dependency profile and repository security policy.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkouts, injection findings, or high-confidence audit findings, but both action references are unpinned and the workflow lacks a top-level permissions block.