webssh

Release historydanger

The package is about 6 months old but has only two releases, both published on the same day, with no demonstrated release activity afterward. This leaves ongoing maintenance unproven.

Build provenancecaution

No build attestation, trusted publisher, or staged-publishing evidence is present, leaving the relationship between the published artifact and its source unverifiable.

Package file treecaution

The artifact contains only four files—README.md, package.json, terminals.js, and webssh.js—so there is little visible packaging evidence beyond the implementation itself.

Type declarationscaution

No type declarations are provided. That is a consumer-facing gap for a package exposing server and client APIs, though it does not by itself show abandonment.