@webassemblyjs/helper-buffer

Build provenancecaution

No build attestation or trusted-publisher provenance is available, so consumers have less evidence connecting the artifact to its source build.

Maintainerscaution

Only one registry account has publish access. This is a modest continuity concern, although the repository is a monorepo-style project and the signal does not measure actual contributor activity.

Project backingcaution

The package is published under the @webassemblyjs namespace, while its linked repository is owned by a user account. The repository context is consistent with a small project, but it does not provide organization-level maintainer redundancy.

Release historycaution

The package has had no releases in the last 12 months, and its latest release was nearly two years ago. Its 84 releases since 2018 show substantial prior maturity, but current registry activity is a maintenance caution.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This indicates currently quiet development, partially offset by the repository's recent January 2025 push and long release history.