flatstr

Build provenancecaution

No build provenance attestation or trusted-publisher identity is present for this release. This limits publication transparency, although the package artifact is small and directly inspectable.

Release historycaution

The latest release was published over seven years ago, with no releases in the last 12 months. This is a meaningful maintenance concern, although the package has a stable 1.0.12 release and appears intentionally small.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive for an extended period. The package may be stable, but fixes should not be expected promptly.

Repo toolingcaution

The repository uses no build tool and has no reported security scanning tooling. This is a modest transparency and maintenance gap, though the package is a small JavaScript module with no runtime dependencies.

Security policycaution

No security policy was found in the linked repository. That weakens the project's vulnerability-reporting transparency, but it is a secondary concern for this small, dependency-free package.