process-utils

Release historydanger

There have been 15 releases since 2018, but no releases in the last 12 months; the latest release was over five years ago. The long publishing gap is a meaningful abandonment risk despite the earlier regular cadence.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months. Combined with the old last push, this indicates that fixes and compatibility updates may not arrive when needed.

Build provenancecaution

No build provenance attestation or trusted publisher information is present, reducing publication transparency. This is a supply-chain hygiene gap, not evidence that the package is malicious.

Repo issue activitycaution

There was no new issue or pull request activity in the last month, and one issue remains open. This is limited supporting evidence of current maintenance rather than a severe issue by itself.

Repo toolingcaution

The repository reports no build tooling and no security scanning tools. For this small JavaScript utility, the lack of a build tool is not concerning, but the absence of security scanning weakens maintenance transparency.