prop-types-exact

Build provenancecaution

No build attestation or trusted-publisher provenance is present for the release. The package is still transparently linked to a matching source repository, but artifact origin is harder to verify.

Release historycaution

The package has existed since June 2017 with 12 releases, but none in the last 12 months and the latest release was in December 2024. That slowing cadence raises maintenance risk, though the long history and stable version reduce it.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. This suggests limited current development activity, even though the repository is not archived.

Workflow auditcaution

All 4 workflows were analyzed, use read-only permissions, and contain no detected sinks or audit findings. However, all 11 action references are unpinned, creating avoidable reproducibility and update risk.