faye

Build provenancecaution

No build attestation or trusted-publisher setup was detected. This weakens publication transparency, although it does not by itself indicate an unsafe or unmaintained release.

Repo issue activitycaution

The repository closed 1 issue in the last month and has 19 open issues, though it had no new issues or merged pull requests during that period. This shows some activity but limited recent collaboration.

Repo toolingcaution

The project uses Make and webpack, showing established build tooling. No security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy. This reduces transparency around vulnerability reporting, but it is not evidence that the package is abandoned.

Type declarationscaution

The package has no type declarations, which makes integration less convenient for TypeScript consumers. This is a consumer-ergonomics gap rather than an abandonment indicator.