to-through

Release historycaution

The package has only four releases and none in the last three years; the latest release was in September 2022. This suggests limited ongoing maintenance, though the stable 3.0.0 release and repository activity provide some continuity.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the old latest release, this is evidence of a dormant project and raises abandonment risk.

Repo toolingcaution

The repository uses a build tool but reports no security-scanning tools. For this small package, the missing scanning is a modest hygiene gap rather than a decisive risk.

Type declarationscaution

No type declarations are included. For a JavaScript stream wrapper this is a consumer ergonomics gap rather than a severe dependency-health problem.

Workflow auditcaution

Both workflows were analyzed without high-confidence findings or untrusted checkout and script-injection sinks, and they avoid top-level write permissions. However, all seven action references are unpinned, weakening build reproducibility.