is-negative-zero

Build provenancecaution

No build attestation or trusted-publisher identity is present. This limits publication transparency, though the package has other evidence of established project structure.

Lifecycle scriptscaution

The package includes prepack and prepublish lifecycle scripts. These are packaging-related rather than install scripts, but they add some build-time behavior to account for.

Release historycaution

The package has existed for over 12 years with eight releases, but its latest release was over two years ago and there were no releases in the last 12 months. This suggests slow maintenance rather than abandonment on its own.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured. Although the repository was pushed in late 2025, the absence of recent development lowers confidence in ongoing maintenance.

Workflow auditcaution

All six workflows were analyzed with no audit findings, and five use read-only permissions. However, all six action references are unpinned, leaving avoidable workflow supply-chain exposure.