signal-exit

Build provenancecaution

No registry build attestation or trusted publisher information is present, leaving publication provenance less transparent even though the package has a long release history.

Lifecycle scriptscaution

The package runs prepare and preprepare install-time scripts, which adds build-time execution during installation and deserves review even though no other signal indicates malicious behavior.

Release historycaution

The package has existed since 2015 with 24 releases, but it has had no registry release in the last 12 months and the latest release was over three years ago, reducing confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, reinforcing the concern that maintenance has recently stalled.

Repo issue activitycaution

The repository has seven open issues and four open pull requests, but no issues or pull requests were opened or closed in the last month, indicating limited recent activity.