node-object-hash

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, materially increasing the risk that fixes and support are no longer forthcoming.

Build provenancecaution

No build attestation or trusted-publisher provenance is reported, leaving release origin less independently verifiable than it could be; this is a transparency gap rather than a health verdict.

Maintainerscaution

Only one registry account has publish access. This is not proof of abandonment, but combined with zero recent commits it indicates a thin operational base.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single-owner model offers limited visible institutional backing for long-term maintenance.

Release historycaution

The project is mature with 39 releases, but it has made no release in the last 12 months and the latest release was about 21 months ago, indicating stalled maintenance.