webpack-manifest-plugin

Build provenancecaution

No build attestation or trusted-publisher information is present, leaving publication provenance less transparent despite the package having a long release history.

Project backingcaution

The repository is owned by an individual rather than an organization, so continuity depends on a relatively narrow project owner base.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign of currently inactive maintenance despite the recent release.

Repo issue activitycaution

There are no open issues or pull requests and no issue or pull-request activity in the last month; this is neutral alone but provides no evidence of active support.

Repo toolingcaution

The repository uses TypeScript, Vitest, Webpack, and npm scripts, showing a structured build and test setup, but no security-scanning tools are reported.