get-port-please

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less transparent. This is a supply-chain transparency gap, but not evidence that the release is unsafe by itself.

Release historycaution

The project is mature with 22 releases over roughly 6 years, but it has made no release in the last 12 months, which is a maintenance caution for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, indicating currently quiet development despite the repository being unarchived.

Repo issue activitycaution

There are open issues and pull requests, including one new pull request in the last month, but no issues were closed and no pull requests were merged during that period.

Repo toolingcaution

The project uses TypeScript, unbuild, and npm scripts, showing an established build process. No security-scanning tooling was detected, which is a minor hygiene gap.