ndarray

Build provenancecaution

No build attestation or trusted-publisher provenance is present. This limits publication transparency, though the package is otherwise supported by an identified repository and recent release activity.

Repo toolingcaution

The repository reports no build tool and no security-scanning tools. That is a transparency and hygiene gap, but the small, direct package structure limits its weight.

Security policycaution

No security policy is present in the repository. This reduces vulnerability-reporting transparency but is not, by itself, evidence of unsafe code or abandonment.

Type declarationscaution

No type declarations are included. This is a minor integration gap for TypeScript consumers, but it does not indicate abandonment or an unsafe release.