async-mutex

Build provenancecaution

No build attestation or trusted-publisher provenance is present, reducing publication transparency, though this is a transparency gap rather than evidence of unsafe behavior.

Maintainerscaution

Only one registry account has publish access, leaving a thin publishing base; the repository is user-owned, so there is no organization backing shown to compensate for it.

Release historycaution

The package has 18 releases since 2016, but no releases in the last 12 months and its latest release was about two and a half years ago, indicating possible maintenance slowdown.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which supports the release-history concern about slowing maintenance.

Repo issue activitycaution

There are open issues and pull requests, but none were opened, closed, or merged in the last month, indicating limited current project movement.