ecc-jsbn

Release historydanger

The package has had only 4 releases since March 2014, with no release in over 8 years and none in the last 12 months. This is the strongest evidence of possible abandonment, although the stable 0.2.0 release may be intentionally mature.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and indicating no visible ongoing maintenance.

Build provenancecaution

The release has no build attestation or trusted-publisher provenance. This weakens publication transparency, though the absence alone is not evidence that the artifact is unsafe.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 3 issues remain open. This provides no evidence of active issue handling and reinforces the maintenance concern.

Repo toolingcaution

The repository reports no build tooling and no security scanning tools. That is not inherently unsafe for a small JavaScript package, but it provides little evidence of current validation or security oversight.