fast-safe-stringify

Build provenancecaution

The release has no build attestation or trusted-publisher provenance. That limits publication transparency, but the absence alone does not make the package unfit to use.

Release historycaution

The package has 40 releases since March 2016, but its latest registry release was in September 2021 and there were no releases in the last 12 months. This long release gap lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. Although the repository was pushed in December 2024, the recent activity measure still indicates limited current maintenance.

Repo toolingcaution

The repository reports no build tooling and no security scanning tools. For a small JavaScript package this is a hygiene gap rather than a severe dependency risk.

Security policycaution

No security policy is present in the repository. This weakens vulnerability-reporting transparency, though it is not by itself evidence of abandonment.