vinyl-sourcemaps-apply

Release historycaution

The latest registry release was published on December 27, 2015, with no releases in the last 12 months. This is a meaningful freshness concern even though the linked repository shows recent activity.

Repo bus factorcaution

All 3 recent commits came from one contributor, leaving maintenance dependent on a single active individual. Organization ownership provides some handoff capacity but does not fully compensate for the concentration.

Security policycaution

The repository has no security policy. This is a transparency and maintenance gap, though it is less severe for a small package with a narrow dependency surface.