sockjs

Release historydanger

The package has 36 releases, but its latest release was in December 2021 and it had no releases in the last 12 months, indicating substantial maintenance risk.

Build provenancecaution

The release has no build attestation, trusted publisher identity, or staged publishing, leaving the connection between source and registry artifact less transparent.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the long release gap and raising abandonment concerns.

Repo toolingcaution

No build tooling or security scanning tools were detected in the repository, which is a modest maintenance and assurance gap for a package with no recent release activity.

Workflow auditcaution

The workflow audit completed cleanly with no high- or medium-severity findings and no untrusted checkout or injection sinks, but both analyzed action references are unpinned, weakening reproducibility and update safety.