node-gyp-build

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is present, reducing publication transparency; this is a supply-chain hygiene gap rather than evidence of abandonment.

Release historycaution

The package has 40 releases over roughly 9 years, but it has had no releases in the last 12 months; that may indicate slowing maintenance for a mature stable package.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, indicating a current maintenance gap.

Repo issue activitycaution

There were no new or closed issues in the last month, and one pull request was opened without a merge; this provides little evidence of current project responsiveness.

Repo toolingcaution

No build tools or security scanning tools were detected in the repository, limiting automated assurance; the package remains small and has a documented security policy.