@so-ric/colorspace

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, a strong sign that maintenance has stalled.

Build provenancecaution

The release has no build attestation or trusted-publisher provenance, so consumers cannot independently verify how the artifact was produced.

Lifecycle scriptscaution

A prepare script runs during installation, adding build-time supply-chain exposure and making installation more dependent on package scripts.

Maintainerscaution

Only one registry maintainer is listed, leaving limited visible publishing capacity and a higher single-person continuity risk.

Project backingcaution

The registry namespace and repository are owned by the same individual account, which supports ownership alignment but provides no organization-level continuity.