zorbus/bootstrap

Release historydanger

This package has had exactly one release, with no releases in the last 12 months; the latest release was nearly 14 years ago. That strongly indicates abandonment.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long release hiatus.

Dependency profilecaution

The release declares 36 runtime dependencies, including development- and application-oriented components, creating substantial compatibility and maintenance burden.

Lifecycle scriptscaution

Install and update operations run post-install-cmd and post-update-cmd scripts. These add installation complexity and execution surface, though the signal alone does not show malicious behavior.

Security policycaution

The linked repository has no security policy, leaving no documented process for reporting and handling vulnerabilities in a package with many dependencies.