@humanwhocodes/retry

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers have less evidence connecting the published artifact to its source build.

Lifecycle scriptscaution

A prepare script runs during installation or package preparation, adding execution during dependency setup and therefore some supply-chain exposure.

Release historycaution

The package has 15 releases over roughly two years, but none in the last 12 months; the latest release was about 16 months ago, which raises maintenance concern.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, a concrete sign that current development has stalled.

Repo issue activitycaution

There were no newly opened or closed issues or merged pull requests in the last month, and four pull requests remain open; this supports a caution about limited recent activity.