decimal.js-light

Release historydanger

The latest registry release was September 30, 2020, nearly six years before collection, with no releases in the last 12 months. This materially raises maintenance and abandonment risk.

Build provenancecaution

No build attestation or trusted publisher provenance was detected, reducing publication transparency. This is a secondary concern because the package has matching source files and a clear repository link.

Maintainerscaution

One registry publisher is listed. This is a limited bus factor for an individually owned project and provides little redundancy if the maintainer becomes unavailable.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no organizational backing signal to offset the thin maintainer base.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the three months before collection. Although it was pushed in 2024, current development activity is absent.