parse-asn1

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving the origin of the published artifact less independently verifiable.

Dependency profilecaution

Five runtime dependencies are a moderate dependency surface for this small utility, creating some transitive maintenance exposure without evidence of an excessive profile.

Lifecycle scriptscaution

The package has prepack and prepublish lifecycle scripts, adding build-time behavior that dependents should account for, although these are not inherently unsafe.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the past three months, a meaningful sign of currently paused maintenance despite the recent release.

Repo toolingcaution

No build tools or security scanning tools were detected, reducing automated maintenance and security assurance for the project.