which-pm-runs

Repo package mentiondanger

The linked repository name does not match the package and its README does not mention `which-pm-runs`, so package ownership and source correspondence are unclear.

Release historycaution

The package has existed for about 9 years but only three releases, with a median interval of about 4.5 years; one release in the last year and a recent latest release provide some evidence of continued maintenance.

Repo bus factorcaution

All recent commits came from one contributor, leaving maintenance dependent on a single active person.

Repo commit activitycaution

The repository had only 2 commits in the last 3 months, indicating light ongoing activity rather than a strong maintenance cadence.

Security policycaution

The linked repository has no security policy, which reduces transparency for reporting and handling vulnerabilities.