csprng

Release historydanger

The latest release was over nine years ago, with no releases in the last 12 months and only three releases overall. This is the strongest evidence of an aging dependency, though the linked repository was pushed more recently.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, indicating no current maintenance activity. The repository is not archived, but that does not offset the prolonged release inactivity.

Repo toolingcaution

The repository reports no build tooling or security scanning. For this small JavaScript package that is not severe, but it provides little evidence of automated quality or security checks.

Security policycaution

No security policy is present in the linked repository. This is a modest transparency gap for a package whose purpose involves secure random-number generation, although the README documents its use of crypto.randomBytes().