kill-port

Build provenancecaution

No build provenance attestation or trusted publisher is present, reducing publication transparency, but the package is a small direct JavaScript artifact with no install script.

Maintainerscaution

Only one registry account has publish access, creating a thin publishing base; the established repository and recent releases provide some compensation but not redundancy.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. A recent push and release provide some evidence of life, but current development activity is still limited.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 16 issues and 11 pull requests remain open; this suggests limited recent project response.

Repo toolingcaution

The repository reports no build tooling or security scanning. This is a hygiene and transparency gap, though the small JavaScript package has a simple file layout.