static-browser-server

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is present. This leaves publication origin less transparent and lowers supply-chain confidence, without independently making the release unfit.

Release historycaution

The package has existed for over three years and has seven releases, including one in the last 12 months. The lower recent cadence is a mild maintenance concern, partly offset by the latest release in December 2025.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful sign of currently limited maintenance capacity, though it is partly offset by the recent push and release.

Repo toolingcaution

The project uses TypeScript, esbuild, and npm scripts, showing an established build process. No security scanning tools were detected, leaving a modest security-hygiene gap.

Security policycaution

The repository has no security policy. For a package distributed for use in projects, this reduces transparency about vulnerability reporting and response expectations.