beautiful-mermaid

Build provenancecaution

No build attestation or trusted-publisher provenance is available. This weakens release transparency, but it is not by itself evidence that the package is unsafe to depend on.

Repo commit activitycaution

There were zero commits and zero active maintainers during the last three months. The repository was pushed recently and the release history is strong, but the current pause is a real maintenance concern.

Repo issue activitycaution

Issues and pull requests remain active, with one new issue, two new pull requests, and two closed issues in the last month. However, no pull requests were merged in that period, so maintenance response appears limited.

Repo toolingcaution

The project uses TypeScript, tsup, and npm scripts for builds, supporting a conventional build process. No security scanning tools were detected, which is a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, leaving disclosure and response expectations undocumented.