file-system-cache

Build provenancecaution

The release has no build attestation or trusted-publisher provenance, leaving publication authenticity and reproducibility less transparent.

Maintainerscaution

One registry maintainer account provides a thin publishing base, although the linked repository and package appear consistently owned by the same individual.

Release historycaution

The package has 30 releases over roughly 11 years, but no releases in the last 12 months; the latest release was in August 2024, indicating stalled maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's broader release pause and raising abandonment risk.

Repo toolingcaution

The project uses TypeScript, Vitest, tsup, and npm scripts, showing a credible build and test setup, but no security scanning tools are configured.