topo

Registry deprecationdanger

The package is deprecated at registry scope because it has moved to @hapi/topo, and the notice warns that this release is no longer maintained and may contain bugs or security issues. This outweighs the repository's otherwise active state.

Release historycaution

The package has had no registry release in more than two years, despite a long history and 13 total releases. Recent repository activity partly offsets abandonment concerns but does not restore this deprecated package's release maintenance.

Repo bus factorcaution

All 2 recent commits came from one contributor, which creates concentration risk. Organizational ownership is a mitigating factor, but no second recently active contributor is shown.

Workflow auditcaution

The single workflow was fully audited with no dangerous triggers, sinks, or findings. Its one action reference is unpinned, a minor reproducibility and tampering-hygiene gap.