typed-inject

Build provenancecaution

No build attestation or trusted-publisher provenance was recorded, leaving publication origin less verifiable. This is a transparency gap, but not evidence that the release is unsafe.

Project backingcaution

The repository is owned by an individual rather than an organization, so the project has a narrower visible backing structure. Other evidence shows a correctly linked, established project, partly compensating for that limitation.

Release historycaution

The package has 15 releases since January 2019, but none in the last 12 months; the latest registry release was about 21 months ago. This indicates a meaningful maintenance slowdown for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. With no registry releases in the last 12 months, this is the strongest abandonment concern.

Repo issue activitycaution

There are 12 open issues and 6 open pull requests, but no issues or pull requests were created or merged in the last month. This supports the view that project activity is currently quiet.