@emnapi/core

Maintainerscaution

Only one registry account can publish the package, creating a publishing continuity concern, though active repository contributions provide some compensating maintenance evidence.

Project backingcaution

The package is backed by a personal repository owner rather than an organization, so the single registry maintainer and contributor concentration carry more weight.

Repo package mentioncaution

The linked repository name does not match @emnapi/core and its README does not mention the package, creating some uncertainty about the package-to-repository linkage; the monorepo file tree partly offsets that concern.

Repo toolingcaution

The project uses TypeScript, npm scripts, and Rollup for builds, but no security scanning tools were detected; the missing scanning is a modest transparency gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.