data-values/javascript

Release historydanger

The package has 21 releases but none in the last 12 months, and its latest release was about 9 years ago. This is strong evidence of stalled maintenance, though the repository was pushed more recently.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, reinforcing the lack of current release activity. The repository's separate recent push evidence softens this but does not show ongoing development.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a secondary concern rather than evidence that the package is unfit.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. All 3 action references are unpinned, which is a modest reproducibility and supply-chain hygiene gap.