which-pm

Release historycaution

The package has existed for about 9 years with 11 releases, but only 1 release in the last 12 months and a typical gap of about 8 months indicate a slow cadence.

Repo bus factorcaution

One contributor made all 2 recent commits, leaving maintenance responsibility concentrated in a single person.

Repo commit activitycaution

Only 2 commits were made in the last 3 months, showing limited recent activity, although this is consistent with the package's slow release cadence rather than complete abandonment.

Repo package mentioncaution

The repository name does not match the package and its README does not mention which-pm, so the package's source association is less transparent; the broader repository may be a monorepo, but that is not established by this signal.

Repo toolingcaution

The repository uses TypeScript build tooling, but no security scanning tools were detected, leaving a modest security-process gap.