konfirm/isoflag

Release historydanger

The package has had only two releases, both in November 2018, with no release in more than seven years. That strongly reduces confidence in ongoing maintenance, although the stable 1.0.1 release may still suit a narrowly scoped library.

Licensecaution

The artifact contains an MIT license file, but the manifest declares the package proprietary. The conflicting declarations require license clarification before distribution or commercial use.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This is a significant abandonment concern, though the repository is not marked archived.

Security policycaution

The repository has no security policy. For a small, inactive library this is a transparency gap, but it is less significant than the direct evidence of stopped maintenance.