vite-plugin-singlefile

Lifecycle scriptscaution

The package uses a prepare install lifecycle script, which adds some build-time supply-chain exposure, although this signal alone is not evidence that the release is unsafe.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no organizational succession signal; this is partly offset by the package's established release history and matching repository.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, a meaningful maintenance concern. However, the package still has recent registry release activity and was recently pushed, so this is not by itself abandonment.

Repo issue activitycaution

The repository has only 5 open issues and 2 open pull requests, with one new issue in the last month. There was no recent closure or merge activity, so this provides limited evidence of active maintenance.

Repo toolingcaution

The project uses TypeScript, Rollup, Vite, and npm scripts for builds, showing established build tooling, but no security scanning tools were detected.