shallow-copy

Release historydanger

Only two releases were published, both in July 2013, with no release in nearly 13 years. That long absence is a substantial maintenance and abandonment concern, despite the package's small scope.

Build provenancecaution

No build attestation or trusted-publisher provenance is available. This limits publication transparency, although the package is a small, directly inspectable artifact.

Maintainerscaution

The registry lists one maintainer account. That is sufficient for a tiny package but leaves a thin apparent ownership base if maintenance is needed.

Type declarationscaution

No type declarations are included. This is a minor integration gap for a small JavaScript utility, rather than a serious maintenance risk.

Version stabilitycaution

The latest version is 0.0.1 and is not a stable major release, which suggests limited maturity. Its long-standing unchanged version may reflect a deliberately minimal API, but it provides little evidence of ongoing support.