js-binary-schema-parser

Release historydanger

The package has had no release in nearly five years: its latest release was in November 2021, with zero releases in the last 12 months. This is a substantial maintenance concern despite the stable 2.0.3 version.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this indicates very low current maintenance activity.

Build provenancecaution

The release has no build attestation or trusted-publisher metadata, leaving publication provenance less transparent. This is a transparency weakness, not evidence that the package is unsafe.

Maintainerscaution

Only one registry account has publish access. That is a limited publishing base, although registry access alone does not establish actual maintenance activity.

Project backingcaution

The repository is owned by an individual user rather than an organization, so there is no shown organizational backing to compensate for the limited maintainer base and inactive recent development.