@silvia-odwyer/photon-node

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable.

Maintainerscaution

Only one registry account has publish access, which creates publishing concentration, although repository activity shows broader contribution capacity.

Release historycaution

The package has seven releases over several years and no releases in the last 12 months; the latest release was about 16 months ago. Active repository work partly offsets, but does not remove, release-maintenance concern.

Repo toolingcaution

The project uses a build tool, but no security scanning tools were detected, leaving a modest gap in ongoing project hygiene.

Version stabilitycaution

Version 0.3.4 is not a prerelease, but the package remains below 1.0, so API stability is less certain than for a mature major release.