sequelize-pool

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers cannot verify how the published artifact was produced; the otherwise small, dependency-free artifact limits the practical impact.

Release historycaution

The package has existed for about 8 years with 17 releases, but it has had no release in the last 12 months; that weakens evidence of active maintenance while remaining consistent with a mature stable package.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months, which is a concrete sign that maintenance has slowed.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with seven issues open; this indicates limited current project activity but is not by itself evidence of abandonment.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security scanning tools were detected; the missing scanning is a modest repository hygiene gap rather than a health verdict.