readable-web-to-node-stream

Build provenancecaution

No build provenance attestation or trusted-publisher evidence was provided, leaving publication transparency weaker than ideal.

Maintainerscaution

Only one registry publishing account is listed, which creates a thin publishing base; the linked repository and its project tooling provide some compensation.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no demonstrated organizational continuity to offset the thin maintainer base.

Release historycaution

The package has 15 releases since 2019, but its latest release was about 19 months ago and there were no releases in the last 12 months, indicating slowed maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance has paused recently.