webpack-subresource-integrity

Lifecycle scriptscaution

The package has a prepublish lifecycle script. This is a limited supply-chain and install-behavior concern, though it is less severe than scripts that execute directly during installation.

Release historycaution

The package has 50 releases over more than 10 years, but none in the last three months and its latest registry release was over three years ago. This indicates materially slowed release maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. That is direct evidence of a thin or paused maintenance cadence.

Repo issue activitycaution

There were no new or closed issues and no new or merged pull requests in the last month, while 18 issues and 16 pull requests remain open. This supports the concern that active maintenance is currently limited.

Repo toolingcaution

The repository uses webpack, TypeScript, and npm scripts, showing a defined build process, but no security-scanning tools were detected. The missing scanning is a modest hygiene gap.