fuzzysort

Build provenancecaution

No build attestation or trusted-publisher provenance was detected, leaving publication origin less independently verifiable.

Repo bus factorcaution

All 63 recent commits came from one contributor, creating a meaningful continuity risk despite the repository's recent activity.

Repo toolingcaution

The project uses npm build scripts, but no security scanning tools were detected; this is a modest transparency and maintenance gap rather than a severe concern.

Security policycaution

No repository security policy was found, reducing guidance for reporting and handling vulnerabilities.