@ethersproject/hash

Release historycaution

The package is mature, with 47 releases over more than seven years, but it has had no registry release in the last 12 months. That suggests a legacy or slowing release line rather than abandonment by itself.

Repo bus factorcaution

All 8 recent commits came from one contributor, creating a concentrated maintenance dependency. The organization-owned repository provides some capacity to hand work off, so this is a caution rather than a severe risk.

Repo commit activitycaution

The repository had 8 commits in the last 3 months, showing ongoing activity, but only one active maintainer contributed them. That is useful maintenance evidence with limited depth.

Repo package mentioncaution

The repository name does not match this subpackage and its README does not mention the package, so ownership is less directly transparent. The organization-owned ethers repository makes a monorepo relationship plausible, limiting this to caution.

Repo toolingcaution

The project uses Rollup, TypeScript, and npm scripts, but no security scanning tooling was detected. The missing scanning is a modest process gap, partly offset by the repository's security policy and documented security fixes.