tunnel-rat

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less verifiable; this is a transparency gap rather than evidence of a bad release.

Release historycaution

The package has eight releases but none in the last 12 months, and the latest registry release was about three years ago; this materially raises staleness risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with an effectively inactive maintenance period and increasing abandonment risk.

Repo issue activitycaution

There have been no new or closed issues or pull requests in the last month, indicating limited current project activity, though eight open issues and one open pull request provide some ongoing context.

Repo toolingcaution

The project uses TypeScript, Rollup, npm scripts, and Babel for a concrete build, but no security scanning tooling is reported, leaving a modest security-process gap.