@scure/base

Maintainerscaution

Only one registry account has publish access. The source repository is also owned by one user, so this concentration is a real continuity concern despite the package's active release history.

Project backingcaution

The repository is owned by an individual rather than an organization, so the one-person maintainer and contributor concentration represent genuine continuity risk rather than normal organization publishing hygiene.

Repo bus factorcaution

One contributor made all 16 commits in the last 3 months, giving the project a high bus-factor risk. The active cadence and coherent project ownership reduce, but do not remove, the continuity concern.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but reports no security-scanning tools. The repository's independent audit documentation and security policy provide partial compensation.