typed-array-byte-length

Build provenancecaution

No build attestation or trusted-publisher identity is present, limiting publication transparency and making artifact origin harder to verify.

Dependency profilecaution

Five runtime dependencies are a moderate dependency surface for a small utility package, creating some transitive maintenance exposure without evidence here of a specific dependency problem.

Lifecycle scriptscaution

The package uses prepack and prepublish lifecycle scripts. These can add install or publication complexity, but the signal does not show an unsafe install-time script.

Release historycaution

The package has four releases over about three years, but none in the last 12 months; this indicates a mature, slow-moving package with reduced maintenance momentum.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Combined with no releases in the last year, this is a meaningful maintenance concern.