webpack-node-externals

Name lookalikedanger

The package is flagged as borrowing the identity of webpack-sources, a much more downloaded package, and is not described as a fork. That creates a serious risk that consumers may select the wrong package.

Release historydanger

The latest registry release was in April 2021, with no releases in the last 12 months. This long release gap materially raises abandonment risk despite the package's earlier release activity.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months. Combined with no registry releases since 2021, this is strong evidence of slowed maintenance.

Build provenancecaution

No build provenance attestation or trusted-publisher identity is present. This limits publication transparency, though it is not by itself evidence of an unhealthy project.

Maintainerscaution

Only one registry publishing account is listed. The linked repository is user-owned rather than organization-backed, so there is little visible publishing redundancy.