@esbuild-plugins/node-modules-polyfill

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers cannot verify how the registry artifact was produced. This is a transparency limitation, though it is not conclusive evidence of a bad release.

Maintainerscaution

Only one registry publishing account is listed for a user-owned repository, leaving a thin publishing and maintenance base. The repository's tests and structured project layout provide some compensating evidence.

Release historycaution

The latest release was over 3 years ago, with no releases in the last 12 months. The package has a history of 10 releases, but the long current gap lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the extended release gap and indicating limited recent maintenance.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 10 issues and 4 pull requests remain open; this suggests limited current project activity.