@hapi/pez

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving the registry artifact's origin less independently verifiable.

Release historycaution

The package is mature at over seven years old with 12 releases, but only one release arrived in the last 12 months, indicating a slow cadence rather than active development.

Repo bus factorcaution

All recent commits came from one contributor, creating a thin short-term maintenance base; organization backing partly reduces the handoff risk.

Repo commit activitycaution

The repository had one commit in the last three months, showing some recent activity but a notably slow maintenance pace.

Repo toolingcaution

No build or security scanning tools were detected, leaving limited evidence of automated build and security hygiene.