@hapi/iron

Build provenancecaution

This release has no build attestation or trusted-publisher provenance, so consumers cannot independently verify how the artifact was produced.

Release historycaution

The package has eight releases since April 2019, but its latest release was in February 2023 and there were no releases in the last 12 months, indicating a long period without published updates.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence of ongoing maintenance even though it is not archived.

Repo toolingcaution

The project uses TypeScript build tooling, but no security-scanning tools were detected, leaving automated security coverage unconfirmed.

Security policycaution

The linked repository has no security policy, which reduces transparency around vulnerability reporting and response.