ncjsm

Build provenancecaution

This release has no build provenance attestation or trusted-publisher record, so consumers cannot verify how the registry artifact was produced.

Maintainerscaution

Only one registry account has publish access. That is a thin publishing base, and the repository owner is also an individual rather than an organization.

Release historycaution

The package has 14 releases over roughly seven years, but no releases in the last 12 months and its latest release was in January 2023, indicating prolonged inactivity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and raising abandonment risk.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while two issues remain open; this provides no evidence of active maintenance.