setimmediate

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is recorded, so the release has limited modern publication transparency. This is a provenance gap, not evidence that the package is unsafe.

Maintainerscaution

One registry publishing account is listed, which is a thin publishing base, although the repository is owned by an organization and the package is a small mature utility. This remains a modest resilience concern rather than a severe risk.

Release historycaution

The package has existed for about 14 years with six releases, but it has had no registry release in the last 12 months and its latest release was in September 2016. That long period without published updates lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old registry release, this is the main concern for ongoing fixes and support.

Repo issue activitycaution

There are 15 open issues and four open pull requests, but no issues or pull requests were opened or closed in the last month. This suggests limited current project activity.