dc-polyfill

Build provenancecaution

The release has no build attestation or trusted-publisher provenance, so consumers have less verifiable evidence connecting the artifact to the source project.

Release historycaution

The package has 14 releases over roughly three years, but only one release in the last 12 months, indicating a slower current cadence for a package that tracks Node.js API changes.

Repo commit activitycaution

The repository shows zero commits and zero active maintainers in the last three months, weakening evidence of ongoing maintenance despite a recent push timestamp elsewhere.

Repo toolingcaution

No build tool or security scanning tool was detected in the repository, leaving fewer automated safeguards visible for a package intended to track core APIs.

Security policycaution

The repository has no security policy, which is a transparency gap for reporting and handling dependency or release issues.