tiny-typed-emitter

Build provenancecaution

No build attestation or trusted-publisher provenance is present, reducing publication transparency, though this is a supply-chain transparency gap rather than evidence that the release is unsafe.

Maintainerscaution

Only one registry account has publish access. That is a limited publishing base and increases continuity risk for an independently owned package.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-maintainer concern is not offset by visible organizational backing.

Release historycaution

The package has seven releases but none in the last 12 months; its latest release was in July 2021, indicating prolonged release inactivity and a meaningful maintenance concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, corroborating the long release hiatus and increasing abandonment risk.