on-finished

Build provenancecaution

No build attestation or trusted-publisher provenance is reported. This limits publication transparency, though it is not by itself evidence of unhealthy maintenance.

Release historycaution

The package has eight releases over roughly twelve years, but none in the last four years. That suggests a stable, mature dependency while still lowering confidence in active release maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This is a meaningful maintenance warning, although the recent repository push and mature stable codebase partly offset it.

Type declarationscaution

No type declarations are included. This is a minor consumer-ergonomics gap for TypeScript users, but the package is a small established JavaScript module.