has-bigints

Build provenancecaution

No build attestation, trusted publisher, or staged publishing evidence is present, leaving release origin less transparent despite the otherwise complete package structure.

Lifecycle scriptscaution

The package declares prepack and prepublish lifecycle scripts. These are publishing-time hooks rather than consumer install hooks, so they add only limited concern.

Release historycaution

The package has existed since 2019 with four releases, but it had no releases in the last 12 months and its median release interval is about 16 months, indicating a slow maintenance cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign of currently paused maintenance.

Workflow auditcaution

All six workflows were analyzed with no audit findings, no untrusted checkouts, and read-only permissions on five workflows. However, all six action references are unpinned, which weakens build reproducibility and supply-chain protection.