raphaeu/colorize

Licensedanger

The manifest declares a proprietary license, with no recognized license text or license file in the package or repository. That creates a significant legal and transparency concern for an open-source dependency.

Release historydanger

The package has only two releases, with the latest published nearly six years ago and none in the last 12 months. This strongly suggests the release is no longer actively maintained.

Maintainerscaution

Only one registry account has publish access. That is a thin operational base for a package whose repository also shows no recent activity.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. This raises abandonment risk even though the repository is not archived.

Security policycaution

The repository has no security policy. For a small package this is not decisive alone, but it leaves vulnerability reporting and response expectations undocumented.