@jridgewell/source-map

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving the origin of the published artifact less transparent than it could be.

Project backingcaution

The package and repository are owned by the same individual account rather than an organization, so the concentrated maintainer activity is not offset by visible organizational backing.

Release historycaution

The package has 12 releases since May 2022, but none in the last 12 months; the latest release was over a year ago. This lowers confidence in ongoing release maintenance, although the repository was pushed recently.

Repo bus factorcaution

One contributor made all recent commits, concentrating maintenance responsibility and increasing continuity risk.

Repo commit activitycaution

The repository had only one commit in the last three months, so current maintenance activity is limited even though it has not vanished entirely.