delaunator

Build provenancecaution

No build attestation or trusted-publisher provenance was reported, so consumers have limited registry-level evidence connecting the artifact to its source build.

Release historycaution

This is a mature package released since 2017 with 20 releases, but only one release appeared in the last 12 months, indicating a slower maintenance cadence.

Repo bus factorcaution

One contributor made all commits in the last three months. Organization ownership provides handoff capacity, but no second active contributor is shown in this period.

Repo commit activitycaution

Only one commit was recorded in the last three months, showing limited recent development activity even though the repository remains active enough to receive a push.

Repo toolingcaution

The project uses TypeScript, Rollup, and npm scripts, but no security scanning tool was detected, leaving a modest security-process gap.