connect-redis

Build provenancecaution

No build attestation or trusted-publisher provenance was detected, so consumers have less verifiable evidence connecting the registry artifact to its source build.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the concentrated recent contribution pattern has no visible organizational backing to offset it.

Repo bus factorcaution

One contributor made all three commits in the past three months, creating a concentrated bus factor even though the repository is not archived.

Repo commit activitycaution

There were three commits in the past three months, showing recent work, but all came from one active maintainer, limiting demonstrated maintenance capacity.

Repo toolingcaution

The project uses TypeScript, Vite, and npm scripts, showing a defined build process, but no security-scanning tools were detected.