tiny-async-pool

Build provenancecaution

No build attestation or trusted-publisher provenance is present, reducing publication transparency, though this is a process gap rather than evidence that the release is unsafe.

Maintainerscaution

Only one registry account has publish access, leaving limited publishing redundancy; this is a maintenance-resilience concern for a user-owned project.

Release historycaution

The package has 11 releases since June 2018, but the latest was in May 2022 and there were no releases in the last 12 months, indicating a long release pause.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months. The repository's July 2025 push partly offsets this, but current maintenance capacity remains uncertain.

Repo toolingcaution

The repository uses Babel for builds, but no security-scanning tooling was detected, leaving a modest transparency and maintenance-hygiene gap.