klaw-sync

Build provenancecaution

No build attestation or trusted-publisher provenance is reported, limiting release transparency; the small, directly included JavaScript artifact provides some compensating simplicity.

Repo bus factorcaution

All two recent commits came from one contributor, creating a meaningful continuity risk despite the package having two registry maintainers.

Repo commit activitycaution

The repository recorded two commits in the last three months, indicating some ongoing maintenance but a fairly light recent pace.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations unclear; this is a transparency gap but not evidence of abandonment.

Type declarationscaution

No type declarations are included. This is a minor integration limitation for TypeScript consumers, while the package is a small JavaScript utility with a documented API.