js-library-detector

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less transparent.

Maintainerscaution

Two registry maintainers provide a small but plausible publishing base; this is supporting evidence only and does not offset the lack of recent release activity.

Project backingcaution

The repository is owned by an individual account rather than an organization, so the small maintainer base provides limited evidence of durable project backing.

Release historycaution

The package has 26 releases and historically released about every 52 days, but it has had no release in nearly three years. That substantially lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance has currently stalled.