promise.series

Release historydanger

The package has only two releases, with the latest published over nine years ago and none in the past 12 months. This is strong evidence of a dormant project, although the small, stable API may require few changes.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the past three months. The repository is not archived, but there is no recent development evidence to offset the long release gap.

Build provenancecaution

No build attestation or trusted-publisher provenance is available. The package is a small four-file artifact with no runtime dependencies, so this limits publication transparency without independently making the release unfit.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting security issues. For this small package this is a transparency gap, but it is secondary to the maintenance evidence.