babel-plugin-transform-typescript-metadata

Build provenancecaution

No build attestation or trusted-publisher configuration is present, so consumers have less independently verifiable evidence about how the artifact was produced. This is a transparency weakness rather than evidence that the release is unsafe.

Maintainerscaution

Only one registry account has publish access. The matching user-owned repository and recent release provide some continuity, but a single publisher leaves limited redundancy if that maintainer becomes unavailable.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no observed organizational backing to offset the small maintainer base.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. The October 2025 release shows recent activity, but the current pause raises maintenance risk.

Repo issue activitycaution

There are nine open issues and five open pull requests, but no issues or pull requests were closed in the last month. This suggests unresolved maintenance work, though the window is short.