reflect.getprototypeof

Build provenancecaution

No build attestation or staged-publishing provenance is present, so consumers cannot independently verify how this release was produced.

Dependency profilecaution

Eight runtime dependencies create a relatively broad transitive surface for a small utility, adding maintenance exposure, although the dependencies are explicitly declared.

Lifecycle scriptscaution

The package uses prepack and prepublish scripts. These are commonly used for packaging, but they add build-time behavior that should be understood when reproducing releases.

Maintainerscaution

Only one registry account has publish access, which is a concentration risk; the organization-owned repository provides some compensating project backing.

Release historycaution

The package has 11 releases over about 6 years, but no releases in the last 12 months; that suggests maintenance has gone quiet even though the release history is established.