propagate

Release historydanger

The latest release was published in April 2019, with no releases in the following seven years despite an otherwise established package history. This materially raises abandonment and compatibility risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months. Combined with no registry release for seven years, this is strong evidence of stalled maintenance.

Build provenancecaution

No build attestation or trusted-publisher provenance is present. For this small JavaScript package this is a transparency gap, but it is not severe enough to outweigh the inspectable source and simple artifact.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while three issues and thirteen pull requests remain open. This suggests limited recent project activity.

Repo toolingcaution

The repository reports no build tooling and no security scanning. The package is simple and dependency-free, which reduces the impact, but security-process coverage remains limited.