minipass-flush

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers cannot independently verify how this release was produced.

Lifecycle scriptscaution

A prepare lifecycle script runs during installation or packaging, adding execution behavior that deserves attention even though no unsafe action is shown here.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. The recent release is compensating evidence, but the current development cadence is still quiet.

Repo issue activitycaution

There are four open pull requests but no issues or merged pull requests in the last month, suggesting limited visible review or integration activity.

Repo toolingcaution

TypeScript build tooling is present, but no security scanning tooling was detected, leaving a modest assurance gap.