comlink

Build provenancecaution

No build attestation or trusted-publisher provenance was found, leaving publication origin less independently verifiable even though other project evidence is strong.

Release historycaution

The package has 37 releases over more than 11 years, but its latest registry release was about 22 months ago and there were no releases in the last 12 months, indicating slowed maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of currently slowed maintenance.

Repo issue activitycaution

There were no new or closed issues and no merged pull requests in the last month, suggesting little recent repository activity.

Repo toolingcaution

The project uses TypeScript, Rollup, and npm scripts, showing a defined build process, but no security-scanning tooling was detected.