glogg

Build provenancecaution

No build provenance attestation or trusted-publisher identity is present. This limits publication transparency, although it is not by itself evidence that the release is unsafe.

Release historycaution

The package has seven releases over nearly 12 years, with a median interval of about 473 days and no releases in the last 12 months. The latest release was published in March 2024, indicating slow maintenance rather than abandonment by itself.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This is consistent with the long release gap and lowers confidence in ongoing maintenance.

Repo toolingcaution

The repository uses Gulp build tooling but reports no security-scanning tools. Build automation is present, while the absence of scanning is a modest transparency gap.

Type declarationscaution

No type declarations are published. This is a minor integration cost for JavaScript consumers, but it reduces ergonomics for TypeScript projects.