camera-controls

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers cannot independently verify how this release was produced.

Lifecycle scriptscaution

The package runs prepack and prepare lifecycle scripts, adding build-time installation behavior that deserves attention, although these scripts are consistent with publishing a compiled library.

Release historycaution

The project has existed since July 2017 with 145 releases, but only two releases in the last 12 months, indicating a slower current cadence without showing abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign that maintenance may have slowed even though the repository was recently pushed.

Repo toolingcaution

TypeScript, Rollup, and npm build tooling are present, but no security scanning tools were detected, leaving a security-hygiene gap.