util.promisify

Dependency profilecaution

The small utility declares 12 runtime dependencies, which adds update and transitive-maintenance burden for a package focused on a narrow compatibility function. No provided signal shows those dependencies are problematic, so this is a limited concern.

Release historycaution

The package has six releases since May 2017, but no releases in the last 12 months and the latest release was about 21 months ago. Its long history partly offsets the slow cadence, but the release gap lowers confidence in active maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months. The recent release shows the project is not abandoned outright, but current maintenance capacity is unclear.

Repo toolingcaution

The repository reports no build tool and no security scanning tools. This is a modest transparency and maintenance gap, partly offset by the repository's tests, changelog, and security policy.

Workflow auditcaution

All nine analyzed action references are unpinned, weakening build reproducibility. The two pull_request_target workflows have no untrusted checkouts or script injections, and the audit found no high- or medium-severity findings.