date-fns

Build provenancecaution

No build attestation, trusted publisher identity, or staged publishing is present, leaving release origin less independently verifiable despite the otherwise established project.

Maintainerscaution

Only one registry publishing account is listed, which is a modest publishing-continuity concern, though the source project is backed by an organization and has a long release history.

Repo bus factorcaution

All recent repository commits came from one contributor, creating concentration risk; organization ownership provides some capacity to hand off maintenance, but no second recent contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, with one active maintainer, which is a meaningful recent-maintenance concern but is offset by five registry releases in the last year.

Repo issue activitycaution

Twenty pull requests were opened in the last month, but no issues or pull requests were closed and none were merged, indicating unresolved maintenance backlog.