webpack-log

Name lookalikedanger

The package is flagged as borrowing the identity of webpack-sources, which has far more downloads and stable releases; it is not described as a fork and the identity signal is explicit. Consumers most likely wanted webpack-sources, making this a severe adoption risk.

Release historydanger

The package has 11 releases but none in the last five years, with the latest release on March 11, 2021. That prolonged release gap is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This materially lowers confidence that compatibility or defects will be addressed.

Maintainerscaution

Only one account has registry publish access. There is no organization backing shown to compensate for this thin publishing base, although registry access alone does not prove who actively maintains the project.

Security policycaution

The linked repository has no security policy. This is a transparency and vulnerability-response gap, though it is less severe than the inactivity evidence.