resolve-global

Release historycaution

The package has only 3 releases over about 9 years, with no releases in the last 12 months; the latest release was in November 2023. This points to limited ongoing maintenance, though the stable 2.0.0 release may be intentionally mature.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap. This increases abandonment risk despite the repository remaining available.

Repo toolingcaution

The repository reports no build tool and no security scanning tool. For this small package that is not severe, but it provides less automated assurance than a maintained project with explicit tooling.

Workflow auditcaution

The workflow audit completed successfully with no reported security findings or untrusted triggers, but both of its 2 action references are unpinned. This is a modest reproducibility and supply-chain hygiene gap, not a severe risk on its own.