promise

Release historycaution

The package has 33 releases over nearly 14 years, but its latest release was nearly four years ago and it had no releases in the last 12 months. This indicates a mature but inactive release cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Together with the long gap since the latest release, this is a meaningful maintenance concern.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, consistent with a quiet project and providing little evidence of active upkeep.

Repo toolingcaution

The repository uses npm scripts but reports no security scanning tools. This is a hygiene gap, though it is partly offset by the repository's security policy and otherwise modest dependency footprint.

Workflow auditcaution

All three workflows were analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 10 action references are unpinned, leaving a supply-chain hygiene weakness.