luxon

Build provenancecaution

No registry build attestation or trusted-publisher provenance is present, leaving the relationship between source and published artifact less independently verifiable.

Release historycaution

The project has 151 releases over more than nine years, but it has had no registry release in the last 12 months despite repository activity, so release maintenance appears slower than its historical cadence.

Repo issue activitycaution

The repository has only one new issue and no closed issues in the last month, while three pull requests were opened and none merged, suggesting some current workflow sluggishness.

Repo toolingcaution

The repository uses established build tooling including Babel, npm scripts, and Rollup, but reports no security scanning tools, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, so consumers lack a clearly documented channel and process for reporting vulnerabilities.