secp256k1

Lifecycle scriptscaution

An install lifecycle script is present, which means installation performs build-related work and adds supply-chain exposure compared with a package requiring no install execution.

Repo bus factorcaution

All 2 recent commits came from one contributor, concentrating current maintenance capacity; organization backing provides some ability to hand work to others but does not show a second active contributor.

Repo commit activitycaution

Only 2 commits were made in the last 3 months, indicating a low recent maintenance pace, although the package itself had a recent release.

Repo issue activitycaution

The repository has 13 open issues and 4 open pull requests, with one issue closed in the last month; this shows some maintenance activity but limited recent throughput.

Repo toolingcaution

The project uses make and npm build tooling, but no security-scanning tools were detected, leaving a modest transparency and hygiene gap.