vite-plugin-commonjs

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers have less evidence connecting the published artifact to its source build.

Release historycaution

The package has 43 releases over about five years, but none in the last 12 months and the latest release was in November 2024, indicating a meaningful maintenance slowdown.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, suggesting limited current project activity alongside the commit slowdown.

Repo toolingcaution

The repository uses TypeScript and established build tools, but no security scanning tools were detected, leaving a modest transparency gap.