stickyfill

Release historydanger

Only two releases exist, with the latest published in December 2017 and no releases in the last 12 months. This is a substantial maintenance and compatibility concern.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. Combined with the years-long inactivity, this is the main abandonment risk.

Build provenancecaution

No registry build attestation or trusted-publisher provenance is available, leaving the relationship between the published artifact and source less verifiable.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while a small backlog remains. This indicates little current project attention.

Repo toolingcaution

The repository has no build tooling or security scanning. For this small five-file JavaScript wrapper, the lack of build tooling is understandable, but the absence of security checks limits transparency.