gl-matrix

Build provenancecaution

No build provenance attestation or trusted-publisher setup was detected, limiting publication transparency, although this is not by itself evidence of an unsafe release.

Release historycaution

The package is mature with 28 releases, but it has had no registry release in the last 12 months, which is a modest maintenance concern.

Repo bus factorcaution

Two contributors were active recently, but one supplied 80% of commits, leaving some contributor-concentration risk.

Repo toolingcaution

The repository uses established build tooling, but no security-scanning tools were detected, leaving a transparency and assurance gap.

Security policycaution

No repository security policy was found, which makes vulnerability reporting and response expectations less clear.