unix-dgram

Build provenancecaution

The release has no build attestation or trusted-publisher provenance. This weakens publication transparency, although it is not by itself evidence that the package is unsafe.

Release historycaution

The package has 22 releases over roughly 14 years, but none in the last 12 months. The latest registry release is recent enough to avoid abandonment concerns, though ongoing release activity is limited.

Repo bus factorcaution

One contributor made 100% of the recent commits. This concentration increases continuity risk, especially because the repository owner is an individual rather than an organization.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating very limited recent development activity despite the recent repository push.

Repo toolingcaution

The repository reports no build tooling and no security-scanning tools. For a native addon, the absence of security scanning reduces transparency around ongoing maintenance.