redux-thunk

Build provenancecaution

No build attestation or trusted-publisher provenance was recorded, leaving publication origin less verifiable than it could be.

Release historycaution

The package has existed for over 11 years with 24 releases, but it has had no registry release in the last 12 months and its latest release was in December 2023. This is a meaningful maintenance concern despite its long history.

Repo commit activitycaution

There were no commits or active maintainers in the three months measured. The recent repository push partly offsets this, but the absence of current commit activity still raises maintenance risk.

Repo toolingcaution

The repository uses established TypeScript, Vitest, Babel, and tsup build tooling. No security scanning tools were detected, which is a minor transparency gap.

Security policycaution

The repository has no security policy. For a small middleware package this is not disqualifying, but it reduces clarity about vulnerability reporting.