sort-keys-length

Release historydanger

The package has only 3 releases and none in the last 12 months; its latest release was in July 2017, roughly 9 years ago. This strongly indicates a dormant release line, though the package's small scope may reduce the need for frequent updates.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long gap since the last release. The inactive project is not archived, but there is no recent evidence of maintenance.

Build provenancecaution

The release has no build attestation or trusted-publisher provenance. This reduces publishing transparency, but the package is a small directly published JavaScript utility rather than a generated artifact.

Maintainerscaution

Only one registry account has publish access, leaving the release process dependent on a single person. The linked repository is also owned by an individual, with no organization backing shown.

Repo toolingcaution

The repository reports no build tools and no security scanning tools. This is a meaningful transparency and maintenance gap, although the package is a small four-file JavaScript utility with no build step.