data-view-byte-length

Build provenancecaution

No build attestation or trusted-publisher identity is present, reducing publication transparency. This is a supply-chain hygiene gap, not evidence that the release is unsafe.

Release historycaution

Only 3 releases exist, with no release in the last 12 months and the latest release nearly two years ago. This limits evidence of ongoing maintenance, though the package may be mature and stable.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. The recent repository push provides some counterevidence, but current development activity is still limited.

Workflow auditcaution

All 6 workflows were analyzed with no reported audit findings, and 5 use read-only permissions. However, all 6 action references are unpinned, which weakens workflow reproducibility and update integrity.