typeid-js

Build provenancecaution

No build attestation or trusted-publishing provenance is present, leaving publication origin less verifiable. This is a transparency gap, but not severe on its own.

Release historycaution

The package has 12 releases but none in the last 12 months; the latest release was about 19 months ago. This suggests maintenance has slowed despite a previously active release cadence.

Repo bus factorcaution

One contributor made all commits in the last three months. The organization-owned repository provides some handoff capacity, but current activity is still concentrated.

Repo commit activitycaution

Only one commit was recorded in the last three months, showing limited recent maintenance activity even though the repository was recently updated.

Repo toolingcaution

The repository uses TypeScript, tsup, and npm scripts for builds, but no security-scanning tools were detected. The build setup is clear, while security automation is limited.