fast-unique-numbers

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is reported. That leaves release origin less independently verifiable than it could be.

Lifecycle scriptscaution

A prepare script runs during installation or packaging. This is a small supply-chain and reproducibility concern, although the signal does not show harmful behavior.

Repo bus factorcaution

One contributor made all 35 commits in the last 3 months, giving the project a concentrated maintenance base. The active commit volume helps, but loss of that maintainer would materially increase abandonment risk.

Repo toolingcaution

The repository uses Rollup, TypeScript, Babel, and npm scripts for builds, showing a structured build process. No security-scanning tooling is reported, which is a minor transparency gap.

Security policycaution

The repository has no security policy. For a small utility this is not severe, but it gives users no documented channel or process for reporting vulnerabilities.