ulid

Build provenancecaution

No build attestation or trusted-publisher metadata was observed, leaving publication provenance less transparent than it could be.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although a recent release and push provide some counterevidence, this still indicates a meaningful maintenance slowdown.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, and six pull requests remain open. Together with zero recent commits, this suggests reduced current activity.

Repo toolingcaution

The project uses TypeScript, Rollup, Vitest, and npm scripts, showing a structured build and test setup. No security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

The repository has no published security policy, so vulnerability reporting and response expectations are less transparent.