jest-when

Build provenancecaution

No build attestation, trusted publisher, or staged-publishing evidence is available, leaving the link between source and published artifact less transparent.

Lifecycle scriptscaution

A prepare install-time script adds build-time execution during installation, creating some extra supply-chain and reproducibility surface despite the absence of runtime dependencies.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, indicating a meaningful recent pause despite the package's broader release history.

Repo toolingcaution

The repository uses TypeScript and build tooling, but no security-scanning tools were detected; this is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unspecified.