base-x

Build provenancecaution

No build attestation or trusted-publisher provenance is recorded, leaving publication origin less independently verifiable. This is a transparency caution, not evidence that the release is unsafe.

Lifecycle scriptscaution

A prepublish lifecycle script is present. This is not automatically unsafe, but it adds release-time behavior that deserves more scrutiny than a package with no lifecycle scripts.

Release historycaution

The package is mature, with 29 releases since 2015 and a typical historical median interval of about 28 days, but it had no releases in the last 12 months. That recent pause is a maintenance caution.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with no registry releases in the last year, this is meaningful evidence of slowed maintenance.

Repo issue activitycaution

Only one issue and two pull requests are open, with no new or merged items in the last month. The low volume is consistent with a small stable project but offers little evidence of current responsiveness.