strict-url-sanitise

Build provenancecaution

No build attestation or trusted-publisher provenance was found, reducing release transparency. This is a transparency weakness rather than evidence that the release is unsafe.

Maintainerscaution

Only one registry publishing account is listed. That is not proof of abandonment, but it leaves limited visible publishing capacity if the maintainer becomes unavailable.

Release historycaution

This package has had only one release, published 456 days ago, with no releases in the last 12 months. That is meaningful evidence of limited ongoing maintenance for a new package.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having stopped after its initial release.

Repo toolingcaution

The repository uses TypeScript, Vitest, tsup, and npm scripts, showing a functioning build and test setup. No security scanning tooling was detected, which leaves a modest oversight gap.