pkg-conf

Registry deprecationdanger

The entire package is deprecated with the explicit message “Renamed to package-config”; unlike a release-only withdrawal, this makes the assessed dependency unsuitable for new use.

Release historydanger

The package has had no releases in nearly three years, despite a long history and 12 total releases. The exact release has notes, but the current cadence indicates abandonment after the rename.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package being superseded rather than actively maintained.

Workflow auditcaution

The workflow audit completed without findings or untrusted checkout and injection patterns, but both action references are unpinned, leaving a supply-chain hygiene gap.