vite-plugin-node-polyfills

Build provenancecaution

No build attestation or trusted-publisher identity is present, so consumers cannot verify provenance from the supplied registry metadata. This reduces publication transparency but is not independently disqualifying.

Maintainerscaution

Only one registry account has publishing access, creating a thin publishing base. The package's long release history partly compensates, but it does not remove single-person continuity risk.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no demonstrated organizational continuity beyond the observed release history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance slowdown despite the recent release history.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 41 issues and 6 pull requests remain open. Combined with zero recent commits, this suggests unattended project work.