serialize-to-js

Release historydanger

The package has 24 releases, but none in the last 12 months and its latest release was in April 2022, indicating several years without a published update.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the concern raised by the absence of recent releases.

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so publication cannot be independently tied to a verified build process.

Maintainerscaution

Only one registry account has publish access, creating a thin publishing base; the repository's user ownership and inactive commit activity provide no visible organizational redundancy.

Project backingcaution

The repository is owned by an individual user rather than an organization, so there is no observed organizational backing to offset the thin maintainer base.