tty-browserify

Build provenancecaution

No build attestation or trusted-publishing provenance is present, so consumers have limited evidence connecting the published artifact to its source. This is a transparency gap, not evidence of compromise.

Release historycaution

Only two releases exist, with the latest published in January 2018 and no releases in the past 12 months. The long release interval is a meaningful maintenance concern for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old registry release, this supports a cautious maintenance assessment.

Repo toolingcaution

The repository reports no build tools and no security scanning tools. For this small four-file package that is not severe, but it reduces evidence of repeatable and monitored maintenance.

Version stabilitycaution

Version 0.0.1 is not a stable major release, which signals an immature versioning position. It is not marked as a prerelease, so this is a moderate concern rather than a severe one.