p-cancelable

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less independently verifiable, although this is a transparency limitation rather than evidence that the package is unsafe.

Project backingcaution

The matching repository is owned by an individual account rather than an organization, so the project has a narrower formal backing structure, but the repository identity is clear.

Release historycaution

The package has existed since 2016 with 15 releases, but its latest registry release was July 2022 and it had no releases in the last 12 months, indicating a potentially slow maintenance cycle.

Repo commit activitycaution

There were no commits and no active maintainers in the latest three months, which is a meaningful sign of currently limited maintenance capacity; the 2025 push provides some compensating evidence but does not show ongoing activity.

Repo toolingcaution

The repository reports no build or security-scanning tools, a modest transparency and maintenance gap, but the package is small and its artifact is straightforward.