axios-mock-adapter

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable. This is a transparency gap rather than evidence that the release is unsafe.

Lifecycle scriptscaution

A prepublish lifecycle script is present. This is a mild packaging-process concern, but the available artifact and repository structure provide useful context and do not show a more severe install-time behavior.

Maintainerscaution

Two registry maintainers provide a thin publishing base. The linked repository is user-owned rather than organization-backed, so there is no provided project-backing signal that offsets this entirely.

Release historycaution

The package has 38 releases over more than 10 years, but no registry releases in the last 12 months and its latest release was nearly two years ago. This lowers confidence in release maintenance, although the long history is a compensating maturity signal.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating limited recent development capacity. Recent repository push activity and the long release history partly compensate, but not fully.