@ethersproject/signing-key

Build provenancecaution

No build provenance attestation or trusted publisher is present, leaving publication origin less independently verifiable; the package's repository, release notes, and established history provide partial transparency but do not replace attestation.

Release historycaution

The package has a mature history with 44 releases over about 7.5 years, but it has had no release in the last 12 months, indicating a slowing maintenance cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last 3 months, a direct sign of currently quiet development.

Repo issue activitycaution

The repository still receives issues and pull requests, but only one issue was closed and no pull requests were merged in the last month, suggesting limited recent throughput.

Repo toolingcaution

The project uses Rollup, TypeScript, and npm scripts, showing an established build process, but no security scanning tools were detected.