cypress-wait-until

Build provenancecaution

No build attestation or trusted-publisher identity was detected, limiting publication transparency, although this is not by itself evidence of unsafe code.

Maintainerscaution

Only one registry publishing account is listed, leaving a thin publishing base and increasing continuity risk if that maintainer becomes unavailable.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single registry maintainer represents a genuinely thin project backing.

Release historycaution

The package has 24 releases over roughly seven years, but none in the last 12 months and the latest release was about two years ago, indicating stalled maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the long release gap and raising maintenance risk.