webpack-virtual-modules

Release historycaution

The package has 28 releases over roughly nine years, but none in the last 12 months and the latest release was over two years ago. Its long history provides maturity, but the current release cadence warrants caution.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. This may reflect a stable project, but it provides limited evidence of ongoing maintenance alongside the stale registry release history.

Security policycaution

The linked repository has no security policy. This is a transparency gap for reporting and handling security issues, although the repository does use Dependabot scanning.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but both action references are unpinned. The low-confidence-risk-free audit is otherwise limited to installing a package outside a lockfile, which is a minor hygiene concern.