yamljs

Release historycaution

The package has had no release in more than 9 years, despite 19 releases overall. That long gap is strong evidence of abandonment risk for a dependency.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. Combined with the old latest release, this points to a project with little current maintenance capacity.

Repo issue activitycaution

The repository has 51 open issues but no issues or pull requests were opened or closed in the last month. The unresolved queue and inactivity add maintenance uncertainty.

Repo toolingcaution

The repository uses npm-based build tooling, but no security scanning tools are configured. The missing scanning is a hygiene gap rather than proof of unsafe code.

Security policycaution

No security policy is present in the repository, leaving vulnerability reporting and response expectations unclear for a package with no recent maintenance activity.