plop

Build provenancecaution

No build attestation or trusted-publisher provenance was recorded. This leaves release-origin transparency weaker, although it does not by itself indicate an unsafe package.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers over the last 3 months. Despite recent releases and pull-request activity, the lack of recent commits raises maintenance and abandonment concerns.

Repo issue activitycaution

There were 7 new pull requests in the last month, but no issues or pull requests were closed or merged in that period. This suggests some incoming activity without recent demonstrated resolution.

Repo toolingcaution

The project uses TypeScript and Turbo build tooling, but no security scanning tools were detected. The missing scanning is a modest repository-hygiene gap.

Security policycaution

The repository has no security policy. Consumers have no documented project process for reporting vulnerabilities, which reduces maintenance transparency.