tsyringe

Release historycaution

The package has existed for about 8 years with 26 releases, but it has had no release in the last 12 months, indicating slowed delivery for this version line.

Repo bus factorcaution

All recent commits came from one contributor, creating a concentrated maintenance dependency; Microsoft organizational backing provides some ability to hand off ownership.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, with 1 active maintainer, showing limited recent maintenance despite other repository activity.

Workflow auditcaution

Both workflows were fully audited, use six pinned actions, and contain no untrusted checkouts or script injection. The audit still flags high-confidence ad hoc package installation and trusted-publishing usage, which are workflow hygiene concerns.