bip39

Build provenancecaution

No build attestation or trusted-publisher identity is present, limiting publication transparency. This is a provenance gap rather than evidence that the release is unsafe or unmaintained.

Release historycaution

The project has a long history with 23 releases, but its latest release was over three years ago and it had no releases in the last 12 months. That weakens evidence of ongoing maintenance despite the package's maturity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the long gap since the latest release, this is the clearest sign that maintenance may be slow.

Repo issue activitycaution

There are only eight open issues and five open pull requests, but no issues or pull requests were opened or closed in the last month. This indicates limited recent project activity.

Repo toolingcaution

The repository uses TypeScript, webpack, and npm build tooling, but no security scanning tools were detected. The missing scanning is a transparency gap, partly offset by the presence of build tooling and CI-related repository structure.