toxic

Maintainerscaution

Only one registry publishing account is listed, leaving a thin publishing and maintenance base. The repository is user-owned rather than organization-backed, so there is no provided evidence of broader project capacity.

Release historycaution

Only two releases exist, and the latest was published about eight years ago; no releases occurred in the last 12 months. This is strong evidence of limited ongoing maintenance, though the stable 1.0.1 line may suit a small, settled utility.

Repo commit activitycaution

There were no commits or active maintainers in the last three months. Combined with the last registry release being about eight years ago, this supports a meaningful maintenance concern.

Repo toolingcaution

The repository reports no build tooling and no security scanning. For a small JavaScript utility this is not severe, but it reduces evidence of disciplined maintenance.

Security policycaution

No security policy was found in the repository. This is a transparency gap, although the package has a small scope and no evidence of a security incident in the provided signals.