tsconfig-paths-webpack-plugin

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin and build reproducibility less transparent. This is a hygiene gap, not evidence that the release is unsafe.

Lifecycle scriptscaution

A prepare lifecycle script is present. This adds install-time build behavior that merits awareness, but the signal alone does not show that it is unsafe or unusually complex.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no provided evidence of organizational backing. This modestly increases continuity risk but is not an abandonment verdict.

Release historycaution

The package has existed since July 2017 with 33 releases, but its latest release was about 22 months ago and there were no releases in the last 12 months. This supports maturity but raises maintenance concerns.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with roughly 22 months since the latest release. The repository is not archived, but current maintenance capacity appears limited.