randombytes

Build provenancecaution

No build attestation or trusted-publishing provenance is present, leaving publication origin less verifiable than it could be.

Release historycaution

The latest registry release was 7 years ago, with no releases in the last 12 months. This is a meaningful freshness concern, although the repository was pushed more recently.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last 3 months. The recent repository push is reassuring but does not demonstrate ongoing development.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, and six issues plus two pull requests remain open. This suggests limited recent project interaction.

Repo toolingcaution

The repository reports no build tooling and no security scanning tools. The small package may not need a build system, but the lack of security checks reduces maintenance transparency.