socks-proxy-agent

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although a recent release and push provide some compensation, this is a meaningful maintenance warning.

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package, creating some uncertainty that the linked repository is the package's direct source. The package's release notes and repository structure provide partial context but do not remove that gap.

Repo toolingcaution

The repository uses a build toolchain including Vitest, Turbo, npm scripts, and TypeScript, but no security scanning tools were detected. The missing scanning is a modest transparency gap.

Security policycaution

No repository security policy was found. This weakens vulnerability-reporting transparency, though it does not by itself indicate abandonment.

Workflow auditcaution

All 13 analyzed action references are unpinned, which weakens build reproducibility. The audit also found high-severity cache-poisoning patterns only at low confidence and a high-confidence low-severity ad hoc package install, so the main concern is workflow hygiene rather than a severe confirmed exposure.