stealthy-require

Release historydanger

The package has had 4 releases since May 2016, with no release in roughly 9 years; this is strong evidence of a largely inactive release process.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, indicating no current maintenance activity.

Lifecycle scriptscaution

A prepublish lifecycle script is present, adding a small amount of install and publishing complexity even though no other install-time script is reported.

Maintainerscaution

Only one registry account can publish the package, leaving limited publishing redundancy; the linked repository is also owned by an individual rather than an organization.

Repo toolingcaution

The repository uses build tools but reports no security scanning tools, leaving a modest assurance gap that is secondary to the maintenance evidence.