vendors

Project backingcaution

The repository is owned by an individual account rather than an organization, so the project has a relatively narrow visible backing base.

Release historycaution

The package has had no registry release in nearly five years, after seven releases over roughly ten years. That is a meaningful maintenance concern, though the small, stable package may need few changes.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. Combined with the old latest registry release, this indicates inactive maintenance.

Repo toolingcaution

The project uses TypeScript and npm scripts, but no security scanning tools were detected. That is a modest repository hygiene gap rather than evidence of abandonment on its own.

Security policycaution

No repository security policy was detected, reducing disclosure transparency, though the package has no runtime dependencies and is a small data library.