jsts

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is recorded, reducing release transparency for the published artifact.

Maintainerscaution

Only one registry publishing account is listed, leaving limited publishing redundancy even though this can reflect a small open-source project.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single-maintainer concern is not offset by organizational backing.

Release historycaution

The project is mature with 74 releases, but it has made no registry release in the last 12 months and its latest release was nearly two years ago, which raises maintenance concerns.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating a meaningful risk of slowed maintenance.