passport-google-oauth20

Build provenancecaution

No build provenance attestation is present. This weakens publication transparency, but the package is a small library with no reported install-time scripts, so the gap is limited.

Release historycaution

Only two releases are recorded, with the latest published in March 2019 and no releases in the past 12 months. This indicates a long-standing maintenance gap, though the package is mature rather than newly unstable.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months. The repository is not archived, but current maintenance capacity is not evident.

Repo issue activitycaution

There were no new or closed issues or pull requests in the past month, while 53 issues and 5 pull requests remain open. This supports a picture of limited recent project activity.

Security policycaution

No security policy was found in the repository. This is a transparency and response-process gap, but it is not by itself evidence that the package is unsafe.