minisearch

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is reported, leaving publication provenance less transparent than it could be.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no visible organizational backing to compensate for the thin current activity.

Release historycaution

The package has 85 releases over about eight years, but it has had no releases in the last 12 months; the long history supports maturity while the current pause lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, corroborating the release pause and creating a meaningful maintenance concern.

Repo toolingcaution

The project uses TypeScript, Rollup, and npm scripts for builds, showing established build tooling, but no security scanning tools are reported.