giget

Build provenancecaution

No build attestation or trusted-publisher provenance was detected, so consumers have limited evidence connecting the published artifact to its source build.

Repo bus factorcaution

All recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown in this signal.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, which is a thin recent maintenance signal for a package developers may depend on.

Repo issue activitycaution

Four pull requests were opened in the last month, but no issues or pull requests were closed during that period, suggesting limited visible resolution activity.

Repo toolingcaution

The repository uses TypeScript, tests, and a build tool, but no security-scanning tooling was detected, leaving a modest transparency gap.