unused-imports

Maintainersdanger

The registry reports zero maintainers with publish access, providing no visible ongoing ownership for this release.

Package file treedanger

The artifact contains only README.md and package.json, confirming that this release is a minimal placeholder rather than a usable implementation.

Package scaffoldingdanger

The README says this is a security holding package published after malicious code was removed, so it is not intended for normal dependency use; the lack of tests and changelog is consistent with that placeholder role.

Build provenancecaution

No build attestation, trusted publisher, or staged publishing evidence is present, reducing release transparency; this is especially concerning for a security holding package.

Licensecaution

No license declaration or license file was found, leaving the legal terms for use unclear.