err-code

Build provenancecaution

No build attestation or trusted publisher provenance is present, leaving publication origin less transparent, although this is not by itself evidence of an unsafe package.

Lifecycle scriptscaution

The package uses a prepare install lifecycle script, adding build-time execution during installation; no dangerous behavior is shown, but this is a modest supply-chain and reproducibility concern.

Release historycaution

The package has 13 releases and a long history, but its latest release was over five years ago with no releases in the last 12 months, indicating possible maintenance slowdown.

Repo commit activitycaution

There were no commits or active maintainers in the preceding three months, reinforcing the concern that maintenance has slowed or stopped.

Repo toolingcaution

The repository uses TypeScript build tooling, but no security scanning tool is reported, leaving a security-hygiene gap without indicating abandonment.