bech32

Release historycaution

The package has 10 releases since 2017, but its latest release was over five years ago and there were no releases in the last 12 months, indicating stale release maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

No repository security policy was found, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned, weakening build reproducibility.