simple-websocket

Build provenancecaution

No build attestation or trusted-publisher metadata was present, reducing publication transparency. This is a provenance gap rather than evidence that the release is unsafe.

Maintainerscaution

Only one registry account can publish releases. That is a thin publishing base for an independently owned project and leaves limited visible redundancy if the maintainer becomes unavailable.

Release historycaution

The package has 52 releases and a mature history, but it has had no release in more than five years. That long pause is meaningful evidence of maintenance slowdown.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured, consistent with the long release pause and raising abandonment risk.

Repo issue activitycaution

There were no new or closed issues or pull requests in the measured month, with several items still open. This indicates little current project activity.