react-docgen-typescript

Build provenancecaution

No build attestation or trusted publisher identity is present, so consumers have limited evidence connecting the registry artifact to its source build.

Release historycaution

The project has a long history with 81 releases and a median interval of about 13 days, but it has made no release in about 15 months. That prolonged release gap lowers confidence in current maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers during the last three months. Recent repository pushes and issue activity partly offset this, but the lack of actual commits remains a maintenance concern.

Repo toolingcaution

The repository uses TypeScript for its build, but no security-scanning tooling was detected. The missing scanner is a hygiene gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response guidance unclear.