utila

Release historydanger

The package has had no releases in nearly 12 years, despite a history of 10 releases. Such prolonged release inactivity strongly indicates abandonment.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with the repository's long-term inactivity and archived state.

Repository archiveddanger

The linked repository is archived and was last pushed in December 2014, indicating the project is no longer maintained. This is a severe abandonment risk for a dependency.

Build provenancecaution

No registry build attestation or trusted-publisher provenance is present, so the release has limited publication transparency. This is a secondary concern rather than the reason for the critical score.

Lifecycle scriptscaution

A prepublish lifecycle script is present. This is a mild supply-chain and reproducibility concern, though the signal alone does not establish that the script is unsafe.