stackblur-canvas

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving the relationship between the published artifact and its build process less verifiable.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of currently thin maintenance activity; the recent push and registry releases partly offset but do not remove that concern.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, consistent with low current activity, although the small backlog does not by itself indicate abandonment.

Repo toolingcaution

The repository uses build tooling, but no security scanning tools were detected. This weakens defensive maintenance evidence without making the package unfit on its own.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.