io-ts

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers cannot independently verify how the registry artifact was produced. The package's source, release notes, and stable artifact structure provide some transparency but do not replace provenance.

Release historycaution

The package has 121 releases over roughly 9.6 years, but there have been no releases in the roughly 21 months since December 2024. The long history supports maturity, while the recent pause raises maintenance concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release pause. This is meaningful abandonment risk despite the project's established history.

Repo issue activitycaution

There were no new or closed issues and no merged pull requests in the last month, providing no evidence of recent maintenance activity. The existing 140 open issues and 21 open pull requests add context but do not independently establish abandonment.

Repo toolingcaution

The repository uses TypeScript, Vite, and npm scripts for builds, showing an established build process. No security-scanning tools were detected, leaving a modest security-process gap.