@apideck/better-ajv-errors

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less verifiable than it could be.

Lifecycle scriptscaution

A prepare install-time script adds some supply-chain and installation complexity, although it is a common build hook and the package includes compiled output.

Release historycaution

The package has existed since May 2021 with 16 releases, but only one release appeared in the last 12 months, indicating a slower maintenance cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, a concrete sign that ongoing maintenance is currently thin.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security scanning tools were detected, leaving a modest hygiene gap.