abortcontroller-polyfill

Build provenancecaution

The release has no build provenance attestation or trusted-publisher identity, reducing transparency about how the artifact was produced. This is a supply-chain hygiene gap rather than evidence that the package is unsafe.

Maintainerscaution

Only one registry account has publish access, creating a thin publishing base. The matching repository and established release history provide some context, but do not remove the single-publisher continuity risk.

Release historycaution

The package has 43 releases since July 2017, but none in the last 12 months; its latest release was about 21 months ago. This indicates materially slowed maintenance, although the long release history provides some maturity evidence.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, reinforcing the evidence that maintenance has stalled. The repository is not archived, but that does not offset the lack of recent work.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 5 issues and 11 pull requests remain open. This suggests limited recent project responsiveness.