blakejs

Build provenancecaution

No build attestation or trusted-publisher provenance is present, reducing publication transparency. This is a transparency gap rather than evidence that the release is unsafe.

Maintainerscaution

Only one registry account has publish access, creating a thin publishing base. This is partly consistent with the repository being maintained by an individual, but it still increases continuity risk.

Release historycaution

The package has 18 releases but none in the last four years, with the latest published in March 2022. That slows confidence in ongoing maintenance, despite the package's long history.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with the old latest registry release, this leaves maintenance responsiveness uncertain.

Repo issue activitycaution

No issues or pull requests were opened or merged in the last month, and four pull requests remain open, suggesting limited recent project activity.