promise.prototype.finally

Lifecycle scriptscaution

A prepublish lifecycle script is present, creating some publication-process complexity, but this signal alone does not show an unsafe install-time action.

Release historycaution

The package has 14 releases over roughly 12 years, but none in the last two years. Its long history suggests maturity, while the prolonged release gap lowers confidence in active maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Although the repository was recently pushed, the observed commit window still indicates limited current development activity.

Workflow auditcaution

All seven workflows were analyzed without audit findings or untrusted checkout and script-injection sinks. However, all eight action references are unpinned, which weakens build reproducibility and supply-chain hygiene.