buffer-crc32

Build provenancecaution

The release has no build attestation or trusted-publisher provenance, leaving publication origin less verifiable than it could be.

Project backingcaution

The repository is owned by an individual rather than an organization, so the small maintainer base offers limited visible organizational continuity.

Release historycaution

The package has 24 releases over more than 14 years, but the latest release was about 2 years and 7 months ago, with no releases in the last 12 months.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the concern that maintenance has slowed substantially.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, indicating limited recent project activity, though the small backlog is not severe by itself.