zrender

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers cannot independently verify how the published artifact was produced.

Lifecycle scriptscaution

A prepare script runs during installation, adding build-time execution to dependency installation; this is a modest supply-chain and reproducibility concern, though the package also shows an established TypeScript and Rollup build.

Release historycaution

The package has existed for about 12 years with 81 releases, but only one release was published in the last 12 months, indicating a slower current release cadence than its long history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, a meaningful sign of currently quiet development and increased abandonment risk.

Repo issue activitycaution

Only one pull request was merged in the last month while 326 issues and 48 pull requests remain open, suggesting limited recent throughput relative to the backlog.