wrappy

Build provenancecaution

No build attestation, trusted publisher, or staged publishing evidence is present. This weakens release transparency, but the package is a small source artifact with no runtime dependencies.

Release historycaution

The package has existed since 2014 but has had only four releases, with no release in the last five years. That is a meaningful maintenance concern, although the package is a small, mature utility.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, which reinforces the concern raised by the long release gap.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, suggesting little current maintenance activity, though only three issues and four pull requests remain open.

Repo toolingcaution

The repository reports no build tooling or security scanning. This is a transparency and maintenance gap, though the package is simple and contains only a small JavaScript utility.