@tybys/wasm-util

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable despite the matching repository and source layout.

Lifecycle scriptscaution

A prepare install-time script adds build or installation complexity and deserves review, although the package also has a documented source repository and a small runtime dependency profile.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-contributor maintenance concentration is not offset by visible organizational backing.

Repo bus factorcaution

All two recent commits came from one contributor, so maintenance depends heavily on a single person and has limited continuity if that contributor becomes unavailable.

Repo commit activitycaution

The repository received two commits in the last three months from one active maintainer, showing recent activity but a relatively low maintenance cadence.