@webassemblyjs/wasm-opt

Build provenancecaution

No build attestation or trusted-publisher identity is present, so consumers cannot independently verify how this release was produced. This lowers release transparency but is not an abandonment verdict on its own.

Maintainerscaution

Only one registry account, xtuc, has publish access. That is a thin publishing base and leaves less operational redundancy, although it does not by itself show that repository maintenance is single-person.

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single registry maintainer provides little visible organizational redundancy. The package namespace alone does not compensate for that.

Release historycaution

The package has 64 releases since May 2018, but its latest release was in November 2024 and it had no releases in the last 12 months. This materially raises maintenance and abandonment risk despite its substantial release history.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. This is the clearest evidence that current maintenance has slowed, even though the repository is not archived.