collect-v8-coverage

Build provenancecaution

No build attestation, trusted publisher, or staged publishing evidence was provided. This leaves release origin less transparent, although it is not by itself evidence of unsafe code.

Release historycaution

The package has four releases over about 6 years 9 months, with a median gap of about 2 years 3 months. One release in the last 12 months provides some evidence of continued maintenance, but the cadence is slow.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. A recent repository push and recent release provide some counterevidence, but current observed commit activity remains thin.

Repo toolingcaution

No build tool or security scanning tool was detected. The package is simple, but the absence of security scanning reduces maintenance and assurance coverage.

Security policycaution

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap for a package intended to be consumed as a dependency.