web3/ethereum-util

Maintainerscaution

Only one registry account has publish access. That creates limited continuity if the maintainer becomes unavailable, with no provided evidence of broader organizational backing.

Release historycaution

The last release was in August 2020, and there have been no releases in the past 12 months. This long period without updates is a substantial maintenance concern for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months, consistent with a project that has been inactive for years.

Security policycaution

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is less serious than the demonstrated lack of maintenance activity.

Version stabilitycaution

The release is not a prerelease, but it remains on the 0.x series, so compatibility guarantees are weaker than for a stable major version. The long maintenance gap makes that limitation more consequential.