gifuct-js

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable, though this is a transparency gap rather than a severe health risk.

Project backingcaution

The repository is owned by an individual rather than an organization, so the small two-account registry maintainer base offers limited visible institutional backing.

Release historycaution

The package has had 5 releases since December 2019 but none in the last 12 months; the latest registry release was in November 2021, indicating substantially slowed maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the concern that maintenance has slowed considerably.

Repo issue activitycaution

There are 10 open issues and 10 open pull requests, but none were opened, closed, or merged in the last month, suggesting unresolved maintenance backlog.