resolve-pkg-maps

Release historycaution

The package has only one release, published in December 2022, with no releases in the last 12 months. This is a meaningful maintenance concern for a resolution library, although the repository was pushed more recently.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. This weakens confidence in prompt fixes and ongoing maintenance, even though the repository was recently pushed overall.

Repo toolingcaution

The project uses TypeScript, webpack, and npm scripts, showing a defined build process. No security-scanning tooling is present, leaving a modest transparency gap.

Security policycaution

The repository has no security policy. This is a hygiene and disclosure gap, but it is not by itself evidence that the package is unsafe or abandoned.

Workflow auditcaution

Both workflows were fully analyzed with no injection or high-severity findings, and neither uses broad top-level write permissions. However, all six referenced actions are unpinned, so workflow dependencies can change without a reviewed version update.