detect-browser

Build provenancecaution

No build provenance attestation or trusted-publisher identity was detected, so consumers cannot verify how this release was produced. This lowers transparency but is not decisive on its own.

Lifecycle scriptscaution

The package has a prepare install lifecycle script. This is not necessarily unsafe, but it adds installation behavior that deserves more scrutiny than a package with no lifecycle scripts.

Release historycaution

The package has 49 releases over about 12 years, but none in the last 12 months and its latest release was about 4 years and 9 months ago. This is a meaningful maintenance concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the concern that active maintenance has slowed substantially.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 38 issues and 8 pull requests remain open, indicating limited recent project activity.