reflect-metadata

Release historycaution

The package has 21 releases since 2015, but its latest registry release was about two and a half years before collection and there were no releases in the last 12 months. Active repository evidence partly compensates for the stale release cadence.

Repo commit activitycaution

Only one commit from one active maintainer occurred in the last three months, indicating very limited current development. The recent push and stable nature of the package soften this, but do not remove the maintenance concern.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but the repository's tooling and organization backing provide some compensation.

Token permissionscaution

The repository's workflow has no top-level permissions declaration, so its token permissions are less explicit than ideal. No top-level write permission was observed, limiting the severity of this hygiene gap.