zod-to-ts

Build provenancecaution

The release has no build attestation or trusted-publisher provenance, so consumers have less verifiable evidence connecting the artifact to its source build.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the recent release provides some compensating evidence.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, leaving current maintenance responsiveness uncertain despite six open issues and three open pull requests.

Repo toolingcaution

The repository uses TypeScript, npm scripts, and Vite for builds, but no security scanning tools were detected. That is a transparency and hygiene gap rather than evidence of unsafe code.

Security policycaution

No repository security policy was found, which leaves vulnerability-reporting expectations unclear.