postcss-simple-vars

Release historycaution

The package has had no registry release since November 2022, which is a substantial maintenance gap even though the project has a long release history with 25 releases.

Repo bus factorcaution

All two recent commits came from one contributor, leaving maintenance dependent on a single active person despite organization ownership.

Repo commit activitycaution

The repository recorded two commits in the last three months, showing some current activity, but that pace is limited relative to the long gap in registry releases.

Repo toolingcaution

The project uses a build tool, but no security scanning tools were detected; this is a modest transparency and maintenance gap rather than a standalone severe risk.

Security policycaution

No repository security policy was found, leaving security reporting and response expectations undocumented.