property-information

Build provenancecaution

No build attestation or trusted-publisher provenance is present. This limits publication transparency but does not by itself indicate poor package health.

Maintainerscaution

Only one registry account has publish access. This is a modest bus-factor concern for publishing continuity, though the repository and release history show a long-lived project.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. The recent release provides some compensating evidence, but the quiet commit period warrants monitoring.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security-scanning tools were detected. The established build setup is positive, while the missing scanning layer is a minor hygiene gap.

Security policycaution

No repository security policy was found. This reduces transparency about vulnerability reporting, but it is not evidence of abandonment on its own.