slick-carousel

Build provenancecaution

No build attestation, trusted publisher, or staged publishing evidence is present, so consumers have limited verification that the registry artifact came from the source build.

Package scaffoldingcaution

A substantial README and GitHub Releases are present, but neither the package nor repository contains tests or a changelog. The README also says version 2.0.0 is unavailable through npm, which creates release transparency concerns for this npm artifact.

Project backingcaution

The repository is owned by an individual account rather than an organization, so maintenance continuity depends more directly on the available contributors.

Repo bus factorcaution

Three contributors were active in the last three months, and the leading contributor made 71% of commits. The concentration is a maintenance risk, but the presence of two additional active contributors provides some coverage.

Repo issue activitycaution

The repository has 1,155 open issues and 162 open pull requests, while no issues or pull requests were closed or merged in the last month. This backlog and stalled handling lower confidence in responsiveness.