@lydell/node-pty-linux-x64

Build provenancecaution

No build attestation or trusted-publisher provenance is present. The active release history partly offsets this transparency gap, but consumers cannot independently verify how the binary artifact was published.

Repo bus factorcaution

All 4 recent commits came from one contributor, giving the project a complete short-term contributor concentration. The recent release activity is reassuring, but there is no demonstrated second maintainer.

Repo package mentioncaution

The repository name does not match the platform package and its README does not mention this package. A name mismatch can be normal for a subpackage, but the missing README reference leaves ownership and publication alignment unclear.

Security policycaution

The repository has no security policy. This is a transparency and maintenance-process gap, though it is not evidence that the package is unsafe.

Version stabilitycaution

The assessed release is a prerelease, and 72% of recent releases are prereleases. That makes behavior and compatibility less settled even though the major version is established.