@humanfs/core

Lifecycle scriptscaution

A prepare install lifecycle script introduces some execution and reproducibility surface, but the provided signal does not indicate dangerous behavior or additional install-time scripts.

Maintainerscaution

Only one account has registry publish access, which is a resilience concern, although the organization-backed repository provides some compensating project context and registry access is not evidence of actual maintenance activity.

Release historycaution

The package is about 954 days old with 20 releases and a release as recently as the assessment date, but only two releases occurred in the last 12 months, indicating slower recent publication activity.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months, a significant direct warning about recent maintenance capacity. Recent merged pull requests and the repository push date provide some counterevidence, but do not remove the commit-activity gap.

Repo package mentioncaution

The repository name does not match @humanfs/core and its README does not mention the package, creating a package-identity and repository-linkage caution. The monorepo package tree shows packages/core with matching source and tests, which materially compensates for this mismatch.