discontinuous-range

Build provenancecaution

No build provenance attestation or trusted publishing evidence is available. The package is small and appears to contain its source directly, which partly reduces the concern but does not remove the transparency gap.

Maintainerscaution

Only one registry account has publish access. That is a limited publishing base and increases continuity risk for a small, individually owned project.

Release historycaution

The package has only four releases since September 2014, with no release in nearly two years after version 1.0.3. This suggests a mature but currently inactive project.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, reinforcing the broader evidence of stalled maintenance.

Repo toolingcaution

The repository uses no build tooling and has no detected security scanning. This is acceptable for a tiny JavaScript module, but leaves fewer automated safeguards.