eslint-plugin-vitest

Build provenancecaution

No build attestation or trusted-publisher provenance is present, which limits publication transparency. This is a hygiene concern, not evidence that the release is unsafe by itself.

Release historycaution

The latest registry release was published over two years ago, with no releases in the last 12 months. The repository remains active, which partly offsets the age of this published version but does not remove version-staleness risk.

Repo toolingcaution

The repository uses TypeScript, Vitest, and npm scripts for builds and testing. No security scanning tools are configured, leaving a minor process gap.

Security policycaution

The repository has no published security policy. That reduces transparency for reporting vulnerabilities, though active maintenance and organization ownership provide some compensation.