superagent

Build provenancecaution

The release has no attestation or trusted-publisher provenance, leaving the build and publication chain less independently verifiable. This is a transparency limitation, not a health verdict by itself.

Lifecycle scriptscaution

A prepare script runs during installation or package preparation, adding some install-time complexity. No provided signal shows that it performs unsafe behavior, so the concern is limited.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, which is a maintenance warning. However, the repository was pushed on the assessment date and the release includes version-specific fixes, partly offsetting the concern.

Repo toolingcaution

The repository uses established build tooling and multiple packaging systems, but no security scanning tools were detected. The missing scanning is a modest hygiene gap.

Type declarationscaution

The package ships no type declarations. That reduces TypeScript ergonomics for consumers, although it is a consumer-compatibility gap rather than evidence of abandonment.