fined

Build provenancecaution

No build attestation or trusted-publisher provenance is present. This is a transparency limitation, but it does not by itself outweigh the matching source repository and documented release.

Release historycaution

The package has seven releases since June 2016, but none in the last 12 months and the latest registry release was in October 2021. That long release gap lowers confidence in ongoing maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the repository’s last push in March 2022. This indicates materially slowed maintenance, though not an archived repository.

Repo issue activitycaution

There are no new or closed issues or pull requests in the last month, with only one open issue. This supports the conclusion that current project activity is quiet.

Repo toolingcaution

The repository uses Gulp for builds but reports no security-scanning tools. The missing scanner is a hygiene gap, while the build tooling shows the project remains structured.