smoothscroll-polyfill

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is recorded. This weakens release transparency, but it is a supply-chain hygiene gap rather than evidence that the release is unsafe on its own.

Release historycaution

The package has 15 releases since December 2015, but no releases in the last 12 months and the latest release was in March 2019. This is a meaningful maintenance concern for a dependency, even though the polyfill may be mature and stable.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last 3 months. Combined with the old latest release, this indicates little current maintenance capacity.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 37 issues and 17 pull requests remain open. This supports a picture of inactive project maintenance.

Repo toolingcaution

The repository uses Rollup and npm scripts for builds, showing a defined build process, but no security-scanning tools were detected. The build tooling is positive while the missing scanning is a modest hygiene concern.