browserify-aes

Build provenancecaution

No build provenance attestation or trusted-publisher configuration is reported, so the artifact's connection to its source build is not independently documented.

Release historycaution

The package has 27 releases since October 2014, but its latest registry release was in April 2018 and there were no releases in the last 12 months. That long release gap is a maintenance concern.

Repo commit activitycaution

There were no commits or active maintainers in the three months before collection. Although the repository was pushed in December 2024, the lack of recent development lowers confidence in ongoing maintenance.

Repo issue activitycaution

Six issues and five pull requests remain open, with no issues or pull requests closed in the last month. This suggests limited recent issue handling, though it is not evidence of abandonment by itself.

Repo toolingcaution

The repository reports no build tooling and no security scanning tools. That is a hygiene and transparency gap for a cryptographic library, even though the source includes tests.