validate-npm-package-license

Release historydanger

The latest release was in August 2018, with no releases in the last 12 months. This long gap materially raises abandonment risk despite the package having an established release history.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the lack of recent registry releases and indicating no current maintenance activity.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, and no open issues or pull requests. This is consistent with a quiet, stable project but provides little evidence of active support.

Repo toolingcaution

The repository reports no build tooling and no security scanning tools. This is a modest transparency and maintenance gap for a project with no other strong signs of current activity.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings and no dangerous triggers or writable top-level permissions. However, both of its two action references are unpinned, which weakens reproducibility.