querystringify

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less transparent. This is a supply-chain hygiene gap, not evidence that the release is unsafe.

Release historycaution

The latest release was published about six years ago, with no releases in the last 12 months. This is the strongest maintenance concern, although the package has a stable history of 10 releases since 2014.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with the old latest registry release, this indicates a currently inactive maintenance posture.

Repo toolingcaution

The repository reports no build tooling and no security-scanning tools. For this small dependency the lack of build tooling is unsurprising, but absent security scanning weakens project hygiene.

Security policycaution

No security policy is present in the repository. This lowers transparency around vulnerability reporting, though it is less significant for a small, dependency-free library.