@leichtgewicht/ip-codec

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is present, reducing release transparency and reproducibility evidence.

Lifecycle scriptscaution

The package has a prepare install-time script, which adds execution during installation and warrants caution even though no malicious conclusion follows from the script name alone.

Maintainerscaution

Only one account has registry publish access, creating a thin publishing base. The organization-owned source repository provides some backing, but observed activity remains limited.

Release historycaution

The package has made no releases in the last 12 months, and its latest release was over two years ago. Its seven releases since 2021 show an established but now inactive cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.