source-map-js

Build provenancecaution

No build attestation or trusted-publisher identity was detected, so the release has limited verifiable publication provenance.

Maintainerscaution

Only one registry account has publish access, creating limited publishing redundancy; the linked repository is user-owned, so no organizational backing compensates for that concentration.

Release historycaution

The package has existed since 2021 and released version 1.2.2 recently, but only one release appeared in the last 12 months, indicating a modest maintenance cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, a meaningful sign of thin recent development activity despite the recent release.

Repo toolingcaution

The project uses webpack and npm scripts, but no security-scanning tooling was detected, leaving a modest repository hygiene gap.