@aws-crypto/sha256-browser

Dependency profilecaution

Seven runtime dependencies create a moderate dependency surface for a small browser hashing wrapper, adding some maintenance exposure but not indicating an excessive profile.

Release historycaution

The package has 20 releases since November 2018, but version 5.2.0 was last published in October 2023 and there were no releases in the following 12 months, indicating a long release gap.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is the clearest evidence of currently quiet maintenance.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 25 pull requests remain open; this suggests limited recent project movement.

Workflow auditcaution

All six workflows were analyzed with no untrusted checkouts or script injection, and four use read-only permissions. However, all ten action references are unpinned and a high-confidence audit found an ad hoc package installation, creating a moderate workflow hygiene concern.