@edsdk/n1ed-react

Build provenancecaution

The release has no build attestation or trusted-publisher provenance, leaving publication origin less independently verifiable.

Lifecycle scriptscaution

A prepare lifecycle script runs during installation or packaging, adding some execution surface; the signal provides no evidence that it is unsafe.

Release historycaution

The package has 20 releases since February 2020, but none in the last two years; that is a meaningful maintenance concern for a React integration package.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.

Repo toolingcaution

The repository uses TypeScript, npm scripts, and Babel for a structured build, but reports no security-scanning tools, leaving a modest hygiene gap.