jasmine

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is present, leaving publication origin less verifiable even though this is a transparency gap rather than evidence of abandonment.

Repo bus factorcaution

One contributor made 100% of the 12 recent commits, creating concentration risk; organization ownership provides some capacity to hand maintenance to another contributor.

Repo commit activitycaution

The repository recorded 12 commits in the last three months, showing ongoing work, but all came from one active maintainer.

Repo toolingcaution

No build tool or security scanning tool was detected, reducing evidence of automated build and security hygiene for the project.

Security policycaution

The repository has no security policy, so users have no documented vulnerability-reporting process visible in the collected evidence.