asynckit

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers cannot independently verify how the registry artifact was produced.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last 3 months. The recent release partly offsets this, but the quiet period raises a maintenance risk for future fixes.

Repo toolingcaution

No build tools or security scanning tools were detected. This is a transparency and process gap, although the package is small and has a simple published file tree.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities.