pg-minify

Build provenancecaution

No build provenance attestation or trusted-publisher information is reported, leaving publication origin less independently verifiable.

Maintainerscaution

Registry publishing is handled by one maintainer account. That is a limited bus factor for a user-owned project, though the repository and release history provide some compensating evidence.

Release historycaution

The package is mature with 57 releases over nearly 11 years, but it has had no release in the past 12 months despite a previously frequent release cadence. This indicates slowing maintenance rather than abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months, reinforcing the concern that maintenance has slowed.

Repo toolingcaution

The project uses TypeScript build tooling, but no security scanning tools are reported, leaving a modest transparency and maintenance gap.