@apollo/utils.createhash

Build provenancecaution

The release has no build provenance attestation or trusted-publisher identity. This weakens publication transparency, although it is not evidence that the package is unsafe by itself.

Release historycaution

The package has seven releases since February 2022, but none in the last 12 months; the latest release was in January 2025. This indicates a meaningful maintenance slowdown for a package developers may depend on.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past 3 months. That is a direct sign of limited recent maintenance, despite the repository not being archived.

Repo issue activitycaution

There were no new or closed issues or pull requests in the past month, while eight issues and fourteen pull requests remain open. This suggests limited recent project activity and follow-through.

Repo toolingcaution

The repository uses TypeScript and npm scripts, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than a severe maintenance concern.