run-parallel

Build provenancecaution

No build attestation or trusted-publisher provenance is present. For this small, apparently source-matching package this is a transparency gap, not a severe health risk.

Project backingcaution

The repository is owned by the individual user feross rather than an organization. This does not establish a problem, but it indicates a narrower apparent ownership base than organization-backed projects.

Release historycaution

The package has had no registry release in over five years, despite 17 releases overall. Its long history suggests maturity, but the prolonged release gap lowers confidence in ongoing maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Together with the old latest release, this indicates limited current maintenance capacity.

Repo issue activitycaution

There is only one open issue and no issue or pull-request activity in the last month. This is consistent with a small stable utility, but it does not provide evidence of active support.