node-readfiles

Build provenancecaution

No build attestation or trusted-publisher provenance is available, so consumers cannot independently verify how the published artifact was produced.

Maintainerscaution

Only one registry publishing account is listed, leaving limited visible publishing redundancy; the linked repository is user-owned rather than organization-backed.

Project backingcaution

The repository is owned by an individual account rather than an organization, so the project has limited visible institutional backing.

Release historycaution

The package has existed for over 10 years with 14 releases and one release in the last 12 months, showing continued but infrequent maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the past three months. The recent release and repository push provide some compensation, but ongoing maintenance capacity is still uncertain.