wif

Build provenancecaution

No build attestation, trusted publisher, or staged-publishing evidence is available, leaving the origin of the published artifact less transparent.

Release historycaution

This is a mature package with 18 releases over more than 11 years, but it has had no registry release in the last 12 months; that lowers confidence in current maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating currently quiet development. The recent repository push and long project history provide some compensation, so this is a maintenance caution rather than abandonment evidence.

Repo toolingcaution

TypeScript and npm build tooling are used, but no security-scanning tool was detected; this is a modest transparency and maintenance gap.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a package involved in wallet-key encoding.