buffer-equal

Lifecycle scriptscaution

The package declares prepack and prepublish lifecycle scripts. These are build and publication hooks rather than install hooks, so they are a limited concern rather than a severe dependency risk.

Release historycaution

The package has only five releases since May 2012 and none in the last 12 months; its latest release was in October 2022, which raises maintenance and abandonment concerns.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of current development activity.

Workflow auditcaution

All five workflows were analyzed successfully with no audit findings or untrusted checkouts, but all five action references are unpinned, leaving avoidable build-integrity exposure.