glob-stream

Build provenancecaution

No build attestation or trusted-publisher provenance is available, so consumers cannot verify how the published artifact was produced.

Release historycaution

The package has a long history with 53 releases, but it has had no release in the past 12 months; that makes current maintenance uncertain despite its established record.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past 3 months, reinforcing the concern raised by the absent recent releases.

Repo issue activitycaution

There were no new or closed issues or pull requests in the past month, with only four open issues and one open pull request; this suggests limited recent interaction but is not decisive on its own.

Repo toolingcaution

The repository uses a build tool, but no security scanning tools were detected; this is a modest transparency and maintenance gap, partly offset by the repository's security policy.