vite-plugin-istanbul

Lifecycle scriptscaution

A prepare install-time script is present. This is not necessarily unsafe, but it adds execution during installation and modestly increases dependency-review needs.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the concentrated recent contributor activity has no demonstrated organizational handoff capacity.

Repo bus factorcaution

One contributor made 100% of the single commit in the last three months, leaving maintenance highly concentrated in the observed period.

Repo commit activitycaution

Only 1 commit was recorded in the last three months, which is thin activity for a maintained package and creates some abandonment concern despite the recent releases and merged pull requests.

Security policycaution

The repository has no security policy, reducing transparency about how users should report and receive fixes for vulnerabilities.