@volar/source-map

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign that maintenance may have stalled despite the package's release history.

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, so the linkage is less transparent than expected. The name mismatch alone could reflect a monorepo, but the missing mention remains a caution.

Repo toolingcaution

The project uses TypeScript, Vitest, and npm scripts, but no security scanning tools were detected, leaving a security-process gap.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.