murmurhash-js

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no organizational backing shown to compensate for the package's thin maintenance base.

Release historycaution

The latest release was about 12 years ago, with no releases in the last 12 months. The package is mature and small, but this long gap raises abandonment and future-fix concerns.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. This is the clearest maintenance concern, although the package's small and stable scope limits how much ongoing change it may need.

Repo toolingcaution

The repository reports no build or security-scanning tooling. For this small, dependency-free-looking JavaScript utility this is a modest transparency gap rather than a severe risk.

Security policycaution

No security policy is present. This is a minor transparency gap for a non-cryptographic hashing utility, not a standalone adoption blocker.