@apollo/protobufjs

Build provenancecaution

No build attestation or trusted-publisher identity is present, so consumers have less evidence connecting the published artifact to its source build.

Dependency profilecaution

Twelve runtime dependencies, largely related protobuf utility modules, create a moderate maintenance and transitive-risk surface for this fork.

Lifecycle scriptscaution

The package runs postinstall and prepublish scripts, adding install-time behavior that consumers should account for even though this alone does not indicate abandonment.

Release historycaution

The package is mature at about 7 years old, but only one release appeared in the last 12 months, indicating a slow maintenance cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, a meaningful warning about ongoing maintenance capacity despite the recent release.