bcrypt

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving the origin of the published artifact less independently verifiable.

Release historycaution

The package has a long history with 55 releases, but it has had no release in over a year and none in the last 12 months, indicating slowed maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful sign of currently quiet development.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, reinforcing the picture of limited recent project activity.

Repo toolingcaution

The project uses build tooling, but no security scanning tools were detected, leaving a modest security-maintenance gap.