is-generator-function

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less verifiable.

Dependency profilecaution

Five runtime dependencies create some transitive maintenance surface for a small utility, but the count is not excessive on its own.

Lifecycle scriptscaution

The package uses prepack and prepublish lifecycle scripts, which add install or publication complexity; the supplied evidence does not show that these scripts are harmful.

Maintainerscaution

Only one registry account has publish access, creating a narrow publishing base; organization backing provides some compensation but does not remove single-publisher risk.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months, indicating a meaningful recent maintenance lull, although the recent registry release and repository push provide partial compensation.