@globalart/ddd

Build provenancecaution

The release has no build attestation or trusted-publisher metadata, leaving publication provenance less transparent than it could be.

Repo bus factorcaution

One contributor accounts for all recent commits. Organization backing provides some handoff capacity, but no second active contributor is shown in this period.

Repo commit activitycaution

The repository recorded 17 commits in the last three months, showing activity, but all came from one active maintainer.

Repo package mentioncaution

The repository name does not match the package name, and its README does not mention the package. Although a monorepo can legitimately host subpackages, this makes package-to-source linkage less transparent.

Security policycaution

The repository has no security policy, so there is no documented security reporting path for consumers or contributors.