iobuffer

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving the origin of the published artifact less independently verifiable.

Release historycaution

The package has been maintained since 2015 with 29 releases, but it had no releases in the last 12 months after version 6.0.1. This is a mild maintenance concern rather than abandonment evidence by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the recent push and release history provide some context, this still weakens confidence in active maintenance.

Repo issue activitycaution

There are five open issues and three open pull requests, but no issues or pull requests were opened or closed in the last month. This adds a modest sign of limited current responsiveness.

Repo toolingcaution

TypeScript and npm build tooling are present, but no repository security-scanning tools were detected. The missing scanning is a hygiene gap, not evidence of unsafe code.