@humanwhocodes/gitignore-to-minimatch

Build provenancecaution

No build attestation or trusted-publisher provenance was recorded, leaving publication origin less independently verifiable despite the repository's transparent build structure.

Lifecycle scriptscaution

A prepare lifecycle script runs during installation or package setup, adding execution behavior that consumers should understand even though it is not shown as malicious here.

Release historycaution

The package has only three releases and none in the last 12 months; its latest registry release was in March 2022, indicating a long release gap.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that may be maintained only intermittently.

Repo issue activitycaution

There are no open issues and one open pull request, with no recent issue or pull-request merges; this offers little evidence of active support but is not severe alone.