@csstools/selector-resolve-nested

Name lookalikedanger

The package resembles the much more established resolve package, with 11 versus 93 stable releases and the readme-identifies-as-lookalike signal enabled; consumers may have intended the lookalike instead.

Build provenancecaution

No build attestation or trusted-publisher identity is present, leaving publication provenance less transparent, though this is not by itself evidence of an unhealthy project.

Repo bus factorcaution

All 282 recent commits came from one contributor, leaving a concentrated maintenance base; organization backing provides some handoff capacity but no second active contributor is shown.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, so the repository may not clearly establish ownership of this release; the organization match provides only partial reassurance.