is-whitespace-character

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable. This is a transparency limitation rather than evidence that the release is unsafe.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no demonstrated organizational backing to offset the thin maintenance evidence.

Release historycaution

The package has seven releases over about 10 years and no releases in the last 12 months; the latest release was over four years ago. This indicates limited ongoing maintenance for a dependency that may still be stable.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. For this small, mature utility that may reflect stability, but it provides little evidence of current maintenance capacity.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security-scanning tools were detected. The missing scanning is a modest hygiene gap for a small package.