is-array-buffer

Build provenancecaution

No build attestation or trusted-publisher identity is present, leaving publication provenance less transparent than it could be, though this is not evidence of unsafe content by itself.

Release historycaution

The package has existed since 2015 with 11 releases, but it had no releases in the last 12 months and its median release interval is about 283 days, indicating a slow cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, supporting the conclusion that current development activity has slowed.

Workflow auditcaution

All six workflows were analyzed with no audit findings, and two workflows use read-only permissions. However, all six action references are unpinned, which leaves workflow supply-chain inputs less reproducible.