promise-polyfill

Maintainerscaution

Only one registry account has publish access, which creates a thin publishing base. This is a modest concern rather than a severe risk because the repository and package identity match.

Release historycaution

The package has 46 releases and a long history, but its latest release was over three years ago and it had no releases in the last 12 months, indicating stalled maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. The repository is not archived, but current development activity is absent.

Workflow auditcaution

The workflow was fully analyzed with read-only permissions and no audit findings, but both action references are unpinned, reducing build reproducibility.