javascript-stringify

Build provenancecaution

No build attestation or trusted publisher information is present, limiting publication transparency. The repository does provide matching source, CI, and build tooling as partial context.

Lifecycle scriptscaution

The package uses a prepare install-time lifecycle script, which adds build-time behavior during installation and warrants review before use, even though no dangerous workflow was detected.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single registry maintainer provides limited visible maintainer redundancy.

Release historycaution

The project has 18 releases over roughly 12 years, but it has made no registry release in about five years. That is a meaningful freshness concern for a dependency, despite its established history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating currently inactive development and increasing abandonment risk.