nan

Build provenancecaution

The release has no build attestation, trusted publisher identity, or staged publishing evidence, leaving publication provenance less transparent despite the package's otherwise strong maintenance record.

Repo issue activitycaution

The repository has 57 open issues and no new issues or closed issues in the last month, which suggests limited issue-management activity; one pull request was merged, so this is a modest concern rather than abandonment evidence.

Repo toolingcaution

The repository uses make, CMake, and npm build tooling, but no security scanning tools were detected. Build automation is healthy, while the missing scanning is a minor transparency gap.