ordered-binary

Lifecycle scriptscaution

An npm prepare script runs during installation or package preparation, adding build-time behavior that consumers should account for. No provided signal shows that it is unsafe, so this is a limited caution.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no visible organizational maintenance handoff. Recent activity and two active contributors provide some compensation.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, although active commits and security scanning partly compensate.