tsconfig-paths

Build provenancecaution

The release has no build attestation or trusted-publisher provenance, leaving the connection between source and published artifact less transparent.

Release historycaution

The project has 50 releases over roughly nine years, but the latest release was in December 2023 and there were no releases in the last 12 months. That makes current fixes and compatibility updates less certain.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the old latest registry release, this is the main abandonment concern.

Repo issue activitycaution

The repository has 91 open issues and 24 open pull requests, while none were closed or merged in the last month. The backlog and limited recent resolution suggest slower maintenance.

Repo toolingcaution

The repository uses TypeScript, webpack, and npm scripts, showing an established build process, but it reports no security scanning tools. The missing scanning is a modest transparency gap rather than evidence of an unsafe package.