moo

Build provenancecaution

The release has no build attestation or trusted-publisher provenance. That weakens publication transparency, but it is not by itself evidence that the package is unsafe to depend on.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. The recent release and push provide some compensation, but this remains a maintenance caution.

Repo issue activitycaution

There were no new or closed issues or pull requests during the last month, despite 24 open issues and 11 open pull requests. This suggests limited recent project interaction.

Repo toolingcaution

The repository reports no build tool and no security-scanning tool. For this small dependency-free JavaScript package this is a modest transparency and maintenance gap, not a severe risk.

Security policycaution

No security policy was found in the repository. This limits vulnerability-reporting transparency, though the package's small, dependency-free design reduces the practical impact.