multicast-dns

Build provenancecaution

The release has no build provenance attestation or trusted-publisher metadata. This weakens publication transparency, although it is a supply-chain hygiene gap rather than evidence that the package is unsafe.

Release historycaution

The package has 41 releases since January 2015, but its latest release was in May 2022 and it had no releases in the last 12 months. This is a meaningful maintenance concern despite the historically regular cadence.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. The repository was pushed in June 2024, so this indicates inactivity rather than confirmed abandonment.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with 15 issues and 5 pull requests still open. This supports the broader evidence of currently limited maintenance.

Repo toolingcaution

The repository reports no build tooling and no security scanning tools. For a small pure-JavaScript package this is not decisive, but it reduces visible maintenance and release safeguards.